Information Exposure

Overview katello is a package that adds Content and Subscription Management to Foreman Affected versions of this package are vulnerable to Information Exposure via an errata-related API. An authenticated user can expose internal IDs. This is caused by an incomplete fix for CVE-2016-3072...