An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1939701 | Exploit Issue Tracking Mitigation Third Party Advisory |
Configurations
History
04 Apr 2022, 15:58
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-863 | |
CPE | cpe:2.3:a:theforeman:openscap:*:*:*:*:*:foreman:*:* | |
First Time |
Theforeman
Theforeman openscap |
|
CVSS |
v2 : v3 : |
v2 : 3.6
v3 : 6.1 |
References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1939701 - Exploit, Issue Tracking, Mitigation, Third Party Advisory |
25 Mar 2022, 19:44
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-03-25 19:15
Updated : 2023-12-10 14:22
NVD link : CVE-2021-20290
Mitre link : CVE-2021-20290
CVE.ORG link : CVE-2021-20290
JSON object : View
Products Affected
theforeman
- openscap
CWE
CWE-863
Incorrect Authorization