CVE-2015-3235: Medium severity the foreman vulnerability
Dominic Cleal of Red Hat reported the below issue in Foreman:
A user with the editusers permission (e.g. with the Manager role) is allowed to edit admin users. This allows them to change the password of the admin user's account and gain access to it.
Upstream bug: http://projects.theforeman.org/issues/10829 Upstream fix: pull request not yet merged, see upstream bug
Other sources
Foreman before 1.9.0 allows remote authenticated users with the editusers permission to edit administrator users and change their passwords via unspecified vectors.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3235?
The severity of CVE-2015-3235 is considered medium since it allows authenticated users to edit administrator accounts.
How do I fix CVE-2015-3235?
To fix CVE-2015-3235, upgrade Foreman to version 1.9.0 or later.
Who is affected by CVE-2015-3235?
CVE-2015-3235 affects users with the edit_users permission in Foreman versions prior to 1.9.0.
What type of vulnerability is CVE-2015-3235?
CVE-2015-3235 is an authorization vulnerability that allows privilege escalation.
Is there a patch available for CVE-2015-3235?
Yes, a patch is available by upgrading to Foreman version 1.9.0 or above.