CVE-2016-7077
published 2018-09-10CVE-2016-7077: foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects…
PriorityP420medium4.3CVSS 3.0
AVNACLPRLUINSUCLINAN
EPSS
1.37%
68.4th percentile
foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| foreman | foreman | — | — |
| theforeman | foreman | < 1.14.0 | 1.14.0 |
CVSS provenance
nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
foreman: Foreman information leak through unauthorized multiple_checkboxes helper
vendor_redhat·2016-10-17·CVSS 4.3
CVE-2016-7077 [MEDIUM] CWE-285 foreman: Foreman information leak through unauthorized multiple_checkboxes helper
foreman: Foreman information leak through unauthorized multiple_checkboxes helper
foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.
Package: foreman (OpenStack Foreman) - Will not fix
Package: foreman (Red Hat Ceph Storage 1.3) - Will not fix
Package: foreman (Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer) - Will not fix
GHSA
GHSA-qw4f-j9p2-3626: foreman before 1
ghsa_unreviewed·2022-05-13
CVE-2016-7077 [MEDIUM] CWE-200 GHSA-qw4f-j9p2-3626: foreman before 1
foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.
No detection rules found.
No public exploits indexed.
http://www.securityfocus.com/bid/94230https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7077https://projects.theforeman.org/issues/16971https://theforeman.org/security.html#2016-7077http://www.securityfocus.com/bid/94230https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7077https://projects.theforeman.org/issues/16971https://theforeman.org/security.html#2016-7077
2018-09-10
Published