Foreman CVE-2017-7505 Remote Privilege Escalation Vulnerability
BID:98607
Info
Foreman CVE-2017-7505 Remote Privilege Escalation Vulnerability
| Bugtraq ID: | 98607 |
| Class: | Design Error |
| CVE: |
CVE-2017-7505 |
| Remote: | Yes |
| Local: | No |
| Published: | May 22 2017 12:00AM |
| Updated: | May 22 2017 12:00AM |
| Credit: | David Caplan |
| Vulnerable: |
Redhat Ceph Storage 1.3 Foreman Foreman 1.15 Foreman Foreman 1.12.2 Foreman Foreman 1.12.1 Foreman Foreman 1.11.4 Foreman Foreman 1.11.2 Foreman Foreman 1.11.1 Foreman Foreman 1.11 Foreman Foreman 1.10 Foreman Foreman 1.9.3 Foreman Foreman 1.9.2 Foreman Foreman 1.9.1 Foreman Foreman 1.9 Foreman Foreman 1.8.4 Foreman Foreman 1.8.3 Foreman Foreman 1.8.2 Foreman Foreman 1.8.1 Foreman Foreman 1.8 Foreman Foreman 1.7.5 Foreman Foreman 1.7.4 Foreman Foreman 1.7.3 Foreman Foreman 1.7.2 Foreman Foreman 1.7.1 Foreman Foreman 1.7 Foreman Foreman 1.6.3 Foreman Foreman 1.6.2 Foreman Foreman 1.6.1 Foreman Foreman 1.6 Foreman Foreman 1.5.4 Foreman Foreman 1.5.3 Foreman Foreman 1.5.2 Foreman Foreman 1.5.1 Foreman Foreman 1.5 Foreman Foreman 1.13.0 Foreman Foreman 1.13 Foreman Foreman 1.12.4 Foreman Foreman 1.11.3 Foreman Foreman 1.10.4 |
| Not Vulnerable: |
Foreman Foreman 1.15.1 |
Discussion
Foreman CVE-2017-7505 Remote Privilege Escalation Vulnerability
Foreman is prone to a remote privilege-escalation vulnerability.
An attacker can exploit this issue to gain admin privileges and perform unauthorized actions.
Versions prior to Foreman 1.15.1 are vulnerable.
Foreman is prone to a remote privilege-escalation vulnerability.
An attacker can exploit this issue to gain admin privileges and perform unauthorized actions.
Versions prior to Foreman 1.15.1 are vulnerable.
Exploit / POC
Foreman CVE-2017-7505 Remote Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Foreman CVE-2017-7505 Remote Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Foreman CVE-2017-7505 Remote Privilege Escalation Vulnerability
References:
References:
- Bug 1454392 - (CVE-2017-7505) CVE-2017-7505 foreman: Users with user management (Red Hat Bugzilla)
- CVE-2017-7505 (Red Hat)
- CVE-2017-7505: User scoped in organization with permissions for user management (Foreman)
- Foreman Homepage (Foreman)