← Volver a CVEs
CVE-2015-3235
N/ADescripcion
Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado8/14/2015
Ultima modificacion4/12/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
theforeman:foreman
Debilidades (CWE)
CWE-264
Referencias
http://projects.theforeman.org/issues/10829(secalert@redhat.com)
http://theforeman.org/manuals/1.9/index.html#Releasenotesfor1.9(secalert@redhat.com)
https://access.redhat.com/errata/RHSA-2015:1591(secalert@redhat.com)
https://access.redhat.com/errata/RHSA-2015:1592(secalert@redhat.com)
https://bugzilla.redhat.com/show_bug.cgi?id=1232366(secalert@redhat.com)
http://projects.theforeman.org/issues/10829(af854a3a-2127-422b-91ae-364da2661108)
http://theforeman.org/manuals/1.9/index.html#Releasenotesfor1.9(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2015:1591(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2015:1592(af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=1232366(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.