GHSA-cpv6-pfq6-j2v7MediumCVSS 4.3

katello Improper Privilege Management vulnerability

Published
May 13, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2017-2662 →

📋 Description

A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.

🎯 Affected products1

  • rubygems/katello:< 3.17.0.rc1

🔗 References (6)