CVE-2021-20290

CVE-2021-20290 affects Foreman via the OpenSCAP plugin for the smart-proxy. The vulnerability is an improper authorization handling flaw that allows an authenticated local attacker to access and delete limited resources and to cause a denial of service on the Foreman server. The core issue is tha...

CVE-2021-20290

An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a...