Total vulnerabilities in the database
It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.
| Software | From | Fixed in |
|---|---|---|
| theforeman / foreman | 1.0 | 1.15.6 |
| redhat / satellite | 6.0 | 6.0.x |