ID de Prueba:	1.3.6.1.4.1.25623.1.0.141465
Categoría:	Web application abuses
Título:	Foreman < 1.15.0 Information Disclosure Vulnerability
Resumen:	Foreman is vulnerable to an information leak through organizations and;locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources;instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned;permissions, e.g. to control viewing, editing and deletion.
Descripción:	Summary: Foreman is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion. Affected Software/OS: Foreman prior to version 1.15.0. Solution: Update to version 1.15.0 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7078 BugTraq ID: 96385 http://www.securityfocus.com/bid/96385 https://seclists.org/oss-sec/2017/q1/470
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.