Test ID:	1.3.6.1.4.1.25623.1.0.106422
Category:	Web application abuses
Title:	Foreman 1.7.x < 1.11.3 Privilege Escalation Vulnerability
Summary:	Foreman is prone to a privilege escalation vulnerability.
Description:	Summary: Foreman is prone to a privilege escalation vulnerability. Vulnerability Insight: When accessing Foreman as a user limited to specific organization, if users know other organization id and have unlimited filters they can access/modify other organization data. They just have to set the id as API parameter. Affected Software/OS: Foreman version 1.7.x prior to 1.11.3. Solution: Update to version 1.11.3 or later. CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4451 RHSA-2018:0336 https://access.redhat.com/errata/RHSA-2018:0336 http://projects.theforeman.org/issues/15182 http://projects.theforeman.org/projects/foreman/repository/revisions/1144040f444b4bf4aae81940a150b26b23b4623c https://theforeman.org/security.html#2016-4451
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.