| Package | Affected versions | Patched versions |
|---|---|---|
| satellite | = 6.0 | |
| foreman | ≥ 1.0, < 1.15.6 | 1.15.6 |
It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free