medium6.0
CVE-2015-3235
Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified ve…
Impact
Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Theforeman | Foreman | through 1.8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://projects.theforeman.org/issues/10829
- http://theforeman.org/manuals/1.9/index.html#Releasenotesfor1.9
- https://access.redhat.com/errata/RHSA-2015:1591
- https://access.redhat.com/errata/RHSA-2015:1592
- https://bugzilla.redhat.com/show_bug.cgi?id=1232366
- http://projects.theforeman.org/issues/10829
- http://theforeman.org/manuals/1.9/index.html#Releasenotesfor1.9
- https://access.redhat.com/errata/RHSA-2015:1591
- https://access.redhat.com/errata/RHSA-2015:1592
- https://bugzilla.redhat.com/show_bug.cgi?id=1232366