CVE-2015-3235

Published: Aug 14, 2015Modified: May 6, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.

Affected (1)

Products: Theforeman: Foreman

Theforeman

1 product

Foreman

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Theforeman Foreman	Up to 1.8.2

Related CWEs

CWE-264

References (10)

http://projects.theforeman.org/issues/10829

Source: secalert@redhat.com

Vendor Advisory

http://theforeman.org/manuals/1.9/index.html#Releasenotesfor1.9

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2015:1591

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2015:1592

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1232366

Source: secalert@redhat.com

http://projects.theforeman.org/issues/10829