CVE-2021-20290

An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1939701 Exploit Issue Tracking Mitigation Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1939701 Exploit Issue Tracking Mitigation Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:theforeman:openscap:*:*:*:*:*:foreman:*:*

History

21 Nov 2024, 05:46

Type Values Removed Values Added
References () https://bugzilla.redhat.com/show_bug.cgi?id=1939701 - Exploit, Issue Tracking, Mitigation, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=1939701 - Exploit, Issue Tracking, Mitigation, Third Party Advisory

Information

Published : 2022-03-25 19:15

Updated : 2024-11-21 05:46


NVD link : CVE-2021-20290

Mitre link : CVE-2021-20290

CVE.ORG link : CVE-2021-20290


JSON object : View

Products Affected

theforeman

  • openscap
CWE
CWE-863

Incorrect Authorization