Lucene search
Redhat.comRH:CVE-2016-4475HistoryJun 03, 2016 - 9:48 a.m.
CVE-2016-4475
2016-06-0309:48:26
redhat.com
access.redhat.com
15
EPSS
0.004
Percentile
73.8%
It was found that the foreman API and UI actions and URLs are not properly limited to the organizations and locations they were assigned to. This could allow an attacker to view and update other organizations and locations in the system that they should not be allowed to.
Related
prion
prion
Authentication flaw
2016-08-19 21:59:00
veracode
veracode
Authorization Bypass
2019-01-15 09:09:22
nvd
nvd
CVE-2016-4475
2016-08-19 21:59:09
openvas
openvas
Foreman Privilege Escalation Vulnerability
2016-11-29 00:00:00
cvelist
cvelist
CVE-2016-4475
2016-08-19 21:00:00
cve
cve
CVE-2016-4475
2016-08-19 21:59:09