CVE-2015-5233: redhat satellite
Vulnerability summary
CVE-2015-5233 is a medium (CVSS 6.0) vulnerability in redhat satellite. EPSS estimates a 1.16% chance of exploitation in the next 30 days, higher than 66.7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 0 · Duplicates 1Timeline
- 11-04-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the destroy_reports permission to delete reports from arbitrary hosts via direct access to the (a) individual report show/delete pages or (b) APIs.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.16%
Chance of exploitation in the next 30 days
Percentile
67%
Versus all other CVEs
30-day change
0.00 pp
From 1.16% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat41 products
- satellite6.1
- capsule-installer< 0:2.3.22-1.el6 | < 0:2.3.22-1.el7sat
- foreman< 0:1.7.2.49-1.el6_6sat | < 0:1.7.2.49-1.el7sat
- foreman-compute< 0:1.7.2.49-1.el6_6sat | < 0:1.7.2.49-1.el7sat
- foreman-debug< 0:1.7.2.49-1.el6_6sat | < 0:1.7.2.49-1.el7sat
Theforeman1 product
- foremanEOL≤ 1.8.3 | 1.9.0
2 vendors · 42 products
