The Foreman Project Foreman Katello Plugin vulnerabilities

1 vulnerability

Known vulnerabilities in The Foreman Project Foreman Katello Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2017-2662RubyGemskatello+2
EPSS score
0.94%
A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.