{"api_version":"1","generated_at":"2026-07-23T08:09:36+00:00","cve":"CVE-2017-7540","urls":{"html":"https://cve.report/CVE-2017-7540","api":"https://cve.report/api/cve/CVE-2017-7540.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-7540","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-7540"},"summary":{"title":"CVE-2017-7540","description":"rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.","state":"PUBLISHED","assigner":"redhat","published_at":"2017-07-21 22:29:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-184","NVD-CWE-noinfo","CWE-184 CWE-184"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://github.com/svenfuchs/safemode/pull/23","name":"https://github.com/svenfuchs/safemode/pull/23","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"title":"Fix escaping the jail by using &: by ares · Pull Request #23 · svenfuchs/safemode · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7540","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7540","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Red Hat, Inc.","product":"rubygem-safemode","version":"affected 1.3.2 and earlier","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"7540","vulnerable":"1","versionEndIncluding":"1.3.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"safemode_project","cpe5":"safemode","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"ruby","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T16:04:11.899Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/svenfuchs/safemode/pull/23"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"rubygem-safemode","vendor":"Red Hat, Inc.","versions":[{"status":"affected","version":"1.3.2 and earlier"}]}],"datePublic":"2017-07-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation."}],"problemTypes":[{"descriptions":[{"cweId":"CWE-184","description":"CWE-184","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2017-07-21T21:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_MISC"],"url":"https://github.com/svenfuchs/safemode/pull/23"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2017-7540","datePublished":"2017-07-21T22:00:00.000Z","dateReserved":"2017-04-05T00:00:00.000Z","dateUpdated":"2024-08-05T16:04:11.899Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-07-21 22:29:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-184","NVD-CWE-noinfo","CWE-184 CWE-184"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:safemode_project:safemode:*:*:*:*:*:ruby:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"A0517B41-8027-4C39-A1B5-DAEDF156B6B2"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"7540","Ordinal":"1","Title":"CVE-2017-7540","CVE":"CVE-2017-7540","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"7540","Ordinal":"1","NoteData":"rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.","Type":"Description","Title":"CVE-2017-7540"},{"CveYear":"2017","CveId":"7540","Ordinal":"2","NoteData":"2017-07-21","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"7540","Ordinal":"3","NoteData":"2017-07-21","Type":"Other","Title":"Modified"}]}}}