GHSA-h2gj-g5gx-f7qqMediumCVSS 6.5
A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass...
🔗 CVE IDs covered (1)
📋 Description
A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability leads to cross-tenant data exposure in multi-tenant deployments, potentially compromising sensitive information.