CVE Feed

    Dashboard / CVE / CVE-2017-7505

    CVE-2017-7505

    Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted by these permissions on all administrator user object outside of their scope, such as editing global admin accounts including changing their passwords.

    Published:May 22, 2017
    Last Modified:Apr 20, 2025
    EPS:May 26, 2017
    EPSS Score:0.00308
    CVSS Score:8.8

    Affected Products

    Vendor
    Theforeman
    Product
    Foreman

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-5135 (CVSS 6.5) — A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-e…
    CVE-2025-9572 (CVSS 5) — n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assi…
    CVE-2024-7700 (CVSS 6.5) — A command injection flaw was found in the "Host Init Config" template in the Foreman application via the "Inst…
    CVE-2023-4886 (CVSS 6.7) — A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, whi…
    CVE-2022-3874 (CVSS 8) — A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on…
    CVE-2023-0462 (CVSS 8) — An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary…
    CVE-2023-0118 (CVSS 9.1) — An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in t…
    CVE-2020-10710 (CVSS 4.4) — A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through …
    CVE-2021-3584 (CVSS 7.2) — A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could…
    CVE-2021-3590 (CVSS 8.8) — A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High