| Package | Affected versions | Patched versions |
|---|---|---|
| satellite | = 6.6 | |
| foreman-tasks | < 0.15.7 | 0.15.7 |
An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously, commit tasks were searched through find_resource, which performed authorization checks. After the change to Foreman, an unauthenticated user can view the details of a task through the web UI or API, if they can discover or guess the UUID of the task.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free