PT-2022-10352 · Foreman · Foreman

Evgeni Golov + 1 · Published 2022-03-30 · Updated 2022-04-07 · CVE-2021-3456

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foreman (affected versions not specified)

Description An issue with improper authorization handling was discovered, allowing authenticated local attackers to access and delete limited resources, and causing a denial of service on the server. The primary threats posed by this issue are to system integrity and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2021-3456

Affected Products

Foreman

References · 3

• https://osv.dev/vulnerability/CVE-2021-3456 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3456 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1941001 · Note