2 matches found
Katello - Unauthorized disclosure of Content View lifecycle information
A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access the lifecycle history of a Content View...
4.3CVSS5.6AI score0.00381EPSS
SaveExploits0References1Affected Software1
CVE-2026-79654
A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access the lifecycle history of a Content View...
5.3CVSS5.6AI score0.00381EPSS
SaveExploits0References8
20