CVE-2016-4475
Fixed in a distro release EPSS 3%
The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) delete arbitrary organizations or locations via unspecified vectors.
Products: theforeman foreman
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat satellite 6.1 | foreman | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | foreman-compute | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | foreman-debug | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | foreman-ec2 | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | foreman-gce | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | foreman-installer | 1:1.11.0.10-1.el6sat |
| Red Hat satellite 6.1 | foreman-libvirt | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | foreman-openstack | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | foreman-ovirt | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | foreman-postgresql | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | foreman-proxy | 0:1.11.0.5-1.el6sat |
| Red Hat satellite 6.1 | foreman-rackspace | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | foreman-vmware | 0:1.11.0.51-1.el6sat |
| Red Hat satellite 6.1 | pulp | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | pulp-admin-client | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | pulp-selinux | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | pulp-server | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-agent-lib | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-bindings | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-client-lib | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-common | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-oid_validation | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-repoauth | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-streamer | 0:2.8.3.4-1.el6sat |
| Red Hat satellite 6.1 | satellite | 0:6.2.1-1.2.el6sat |
| Red Hat satellite 6.1 | satellite-capsule | 0:6.2.1-1.2.el6sat |
| Red Hat satellite 6.1 | satellite-cli | 0:6.2.1-1.2.el6sat |
| Red Hat satellite 6.1 | satellite-debug-tools | 0:6.2.1-1.2.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-foreman_discovery | 0:5.0.0.9-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-hammer_cli_foreman_admin | 0:0.0.5-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-hammer_cli_katello | 0:0.0.22.25-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-katello | 0:3.0.0.70-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-ovirt_provision_plugin | 0:1.0.2-1.el6sat |
| Red Hat satellite 6.2 | foreman | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | foreman-compute | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | foreman-debug | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | foreman-ec2 | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | foreman-gce | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | foreman-installer | 1:1.11.0.10-1.el7sat |
| Red Hat satellite 6.2 | foreman-libvirt | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | foreman-openstack | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | foreman-ovirt | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | foreman-postgresql | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | foreman-proxy | 0:1.11.0.5-1.el7sat |
| Red Hat satellite 6.2 | foreman-rackspace | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | foreman-vmware | 0:1.11.0.51-1.el7sat |
| Red Hat satellite 6.2 | pulp | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | pulp-admin-client | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | pulp-selinux | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | pulp-server | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-agent-lib | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-bindings | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-client-lib | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-common | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-oid_validation | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-repoauth | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-streamer | 0:2.8.3.4-1.el7sat |
| Red Hat satellite 6.2 | satellite | 0:6.2.1-1.2.el7sat |
| Red Hat satellite 6.2 | satellite-capsule | 0:6.2.1-1.2.el7sat |
| Red Hat satellite 6.2 | satellite-cli | 0:6.2.1-1.2.el7sat |
| Red Hat satellite 6.2 | satellite-debug-tools | 0:6.2.1-1.2.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-foreman_discovery | 0:5.0.0.9-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-hammer_cli_foreman_admin | 0:0.0.5-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-hammer_cli_katello | 0:0.0.22.25-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-katello | 0:3.0.0.70-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-katello_ostree | 0:3.0.0.70-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-ovirt_provision_plugin | 0:1.0.2-1.el7sat |
| Red Hat satellite capsule 6.1 | foreman | 0:1.11.0.51-1.el6sat |
| Red Hat satellite capsule 6.1 | foreman-debug | 0:1.11.0.51-1.el6sat |
| Red Hat satellite capsule 6.1 | foreman-installer | 1:1.11.0.10-1.el6sat |
| Red Hat satellite capsule 6.1 | foreman-proxy | 0:1.11.0.5-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-admin-client | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-nodes-child | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-nodes-common | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-nodes-parent | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-selinux | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-server | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-agent-lib | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-bindings | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-client-lib | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-common | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-oid_validation | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-repoauth | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-streamer | 0:2.8.3.4-1.el6sat |
| Red Hat satellite capsule 6.1 | satellite | 0:6.2.1-1.2.el6sat |
| Red Hat satellite capsule 6.1 | satellite-capsule | 0:6.2.1-1.2.el6sat |
| Red Hat satellite capsule 6.1 | satellite-debug-tools | 0:6.2.1-1.2.el6sat |
| Red Hat satellite capsule 6.2 | foreman | 0:1.11.0.51-1.el7sat |
| Red Hat satellite capsule 6.2 | foreman-debug | 0:1.11.0.51-1.el7sat |
| Red Hat satellite capsule 6.2 | foreman-installer | 1:1.11.0.10-1.el7sat |
| Red Hat satellite capsule 6.2 | foreman-proxy | 0:1.11.0.5-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-admin-client | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-nodes-child | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-nodes-common | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-nodes-parent | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-selinux | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-server | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-agent-lib | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-bindings | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-client-lib | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-common | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-oid_validation | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-repoauth | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-streamer | 0:2.8.3.4-1.el7sat |
| Red Hat satellite capsule 6.2 | satellite | 0:6.2.1-1.2.el7sat |
| Red Hat satellite capsule 6.2 | satellite-capsule | 0:6.2.1-1.2.el7sat |
| Red Hat satellite capsule 6.2 | satellite-debug-tools | 0:6.2.1-1.2.el7sat |