Lucene search
RedhatCVELIST:CVE-2021-3456HistoryMar 30, 2022 - 4:01 p.m.
CVE-2021-3456
2022-03-3016:01:42
CWE-863
redhat
www.cve.org
2
improper authorization
foreman
salt plugin
smart-proxy
local attacker
denial of service
An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.
CNA Affected
[
{
"product": "smart_proxy_salt",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "affecting up to, including smart_proxy_salt 2.1.5"
}
]
}
]Related
cve
cve
CVE-2021-3456
2022-03-30 16:15:11
osv
osv
CVE-2021-3456
2022-03-30 16:15:11
redhatcve
redhatcve
CVE-2021-3456
2021-03-30 10:27:08
prion
prion
Authorization
2022-03-30 16:15:00
nvd
nvd
CVE-2021-3456
2022-03-30 16:15:11