Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/09/17 10:08 a.m.•46 views

CVE-2026-92894 Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destruction

A flaw was found in the foremanansible plugin's Ansible override values API. The destroy action resolves the target LookupValue record by ID without verifying it belongs to an AnsibleVariable the caller is authorized to edit. An authenticated user with the editansiblevariables permission can dele...

4.3CVSS0.00264EPSS
SaveExploits0References2
Rows per page
Query Builder