Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-4451
HistoryAug 19, 2016 - 9:59 p.m.

Authentication flaw

2016-08-1921:59:00
PRIOn knowledge base
www.prio-n.com
2

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.3%

The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unlimited filters to bypass organization and location restrictions and read or modify data for an arbitrary organization by leveraging knowledge of the id of that organization.

CPENameOperatorVersion
foremaneq1.12.0
foremanle1.11.2

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.3%