CVE-2021-3456

An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denia...

CVE-2021-3456

CVE-2021-3456 describes an improper authorization handling flaw in Foreman, specifically in the Salt plugin for the smart-proxy, enabling an authenticated local attacker to access and delete resources and cause denial of service. The vulnerability is described across multiple sources (NVD, OSV, R...