CVE-2016-4451: Medium severity the foreman vulnerability
Marek Hulán of Red Hat reports:
When accessing Foreman as a user limited to specific organization, having access to other organization IDs and having unlimited filters could allow a user to access/modify other organization data by using the organization ID as an API parameter.
Upstream bug:
http://projects.theforeman.org/issues/15182
Upstream patch:
https://github.com/theforeman/foreman/pull/3553/commits/42066cfa19de316449954079c07bdf1e4cc5eb0a
Other sources
The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unlimited filters to bypass organization and location restrictions and read or modify data for an arbitrary organization by leveraging knowledge of the id of that organization.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4451?
CVE-2016-4451 has a medium severity due to the potential for unauthorized data modification and access.
How do I fix CVE-2016-4451?
To fix CVE-2016-4451, upgrade Foreman to version 1.11.3 or later, or 1.12.0-RC2 or later.
Which versions are affected by CVE-2016-4451?
CVE-2016-4451 affects Foreman versions prior to 1.11.3 and all 1.12.x versions before 1.12.0-RC1.
What are the implications of CVE-2016-4451?
The implications of CVE-2016-4451 include unauthorized access to sensitive organizational data through bypassing location and organization restrictions.
Who is impacted by CVE-2016-4451?
Remote authenticated users with knowledge of specific IDs are impacted by CVE-2016-4451, as they can exploit the vulnerability to gain unwanted access.