An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1939701 | Exploit Issue Tracking Mitigation Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1939701 | Exploit Issue Tracking Mitigation Third Party Advisory |
Configurations
History
21 Nov 2024, 05:46
Type | Values Removed | Values Added |
---|---|---|
References | () https://bugzilla.redhat.com/show_bug.cgi?id=1939701 - Exploit, Issue Tracking, Mitigation, Third Party Advisory |
Information
Published : 2022-03-25 19:15
Updated : 2024-11-21 05:46
NVD link : CVE-2021-20290
Mitre link : CVE-2021-20290
CVE.ORG link : CVE-2021-20290
JSON object : View
Products Affected
theforeman
- openscap
CWE
CWE-863
Incorrect Authorization