https://seclists.org/oss-sec/2017/q1/470

CVE-2016-7078 is considered a medium-level vulnerability as it allows unauthorized access to resources.

To fix CVE-2016-7078, ensure that all user accounts are properly assigned to organizations or locations.

CVE-2016-7078 affects Foreman installations that have the organization or location features enabled.

Yes, CVE-2016-7078 can be exploited remotely via the Foreman web UI or API.

Any user account in Foreman that is not linked to specific organizations or locations is impacted by CVE-2016-7078.

Affected Software

1 affected component

Foreman Foreman<1.15.0

1

CVE-2016-7078 is considered a medium-level vulnerability as it allows unauthorized access to resources.

2

To fix CVE-2016-7078, ensure that all user accounts are properly assigned to organizations or locations.

3

CVE-2016-7078 affects Foreman installations that have the organization or location features enabled.

4

Yes, CVE-2016-7078 can be exploited remotely via the Foreman web UI or API.

5

Any user account in Foreman that is not linked to specific organizations or locations is impacted by CVE-2016-7078.