CVE-2018-14666
published 2019-01-22CVE-2018-14666: An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red…
PriorityP337high7.2CVSS 3.0
AVNACLPRHUINSUCHIHAH
EPSS
1.05%
60.2th percentile
An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | satellite | 6.0 – 6.4 | — |
CVSS provenance
nvdv3.07.2HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7fqh-mgxh-pgrj: An improper authorization flaw was found in the Smart Class feature of Foreman
ghsa_unreviewed·2022-05-13
CVE-2018-14666 [HIGH] CWE-863 GHSA-7fqh-mgxh-pgrj: An improper authorization flaw was found in the Smart Class feature of Foreman
An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.
Red Hat
Satellite: Smart class parameters allow users to access other organizations
vendor_redhat·2019-01-08·CVSS 6.8
CVE-2018-14666 [MEDIUM] CWE-285 Satellite: Smart class parameters allow users to access other organizations
Satellite: Smart class parameters allow users to access other organizations
An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.
An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Satellite, independent of the organization the host belongs to. This flaw affects all Satellite 6 versions.
Package: foreman (Red Hat Satellite 6) - Will not fix
No detection rules found.
No public exploits indexed.
2019-01-22
Published