{"id":"CVE-2016-7078","aliases":["EUVD-2016-7958","GHSA-c2qx-mg67-hwxr","RHSA-2018:0336"],"status":"published","title":"foreman before version 1.15.0 is vulnerable to an information leak through organizations and...","description":"foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.0136,"percentile":0.71897,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-285"],"published":"2018-09-10T15:00:00Z","modified":"2026-10-24T10:49:24Z","affected":[{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-discovery-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.4-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.15.6.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.26-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.4-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-proxy-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"hiera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.26-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"kobo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-docker-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-docker-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-nodes-child","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-nodes-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-nodes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-ostree-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-ostree-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-rpm-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-rpm-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.16-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-agent-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-ostree-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-rpm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-zope-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"python-zope-interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"redhat-access-insights-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.9-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-kafo_wizards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_dhcp_remote_isc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.2.1-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_discovery_image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.9-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.git.0.b5c2768.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-smart_proxy_remote_execution_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-2.git.0.3b416c9.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"satellite-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0.12-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"tfm-rubygem-foreman-tasks-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.8-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"tfm-rubygem-foreman_remote_execution_core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.3::el7","package":"tfm-rubygem-smart_proxy_dynflow_core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.14-1.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.14-1.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:201801241201-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-discovery-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.4-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.15.6.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.26-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.4-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-proxy-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-rackspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.6.34-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"hiera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.26-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"kobo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-docker-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-docker-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-ostree-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-ostree-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-puppet-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-rpm-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-rpm-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.16-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-ostree-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-rpm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.4.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-zope-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"python-zope-interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-4.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"redhat-access-insights-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.9-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-kafo_wizards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.1-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_dhcp_remote_isc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.2.1-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-3.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_discovery_image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.9-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.git.0.b5c2768.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-smart_proxy_remote_execution_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-2.git.0.3b416c9.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0-23.0.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"satellite-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.0.12-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-bastion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.1.4-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman-redhat_access","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.13-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman-tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6.4-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman-tasks-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.8-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_bootdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.2.2-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.1.5.3-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0.3-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_hooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.14-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.11-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_remote_execution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7.2-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_remote_execution_core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_theme_satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4.16-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-foreman_virt_who_configure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.9-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.0.1-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_csv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.0.5-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_bootdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3.3-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-2.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.5-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_remote_execution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.12-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_foreman_virt_who_configure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-hammer_cli_katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.3.5-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.58-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-katello_ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5.58-1.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-ovirt_provision_plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.fm1_15.el7sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.3::el7","package":"tfm-rubygem-smart_proxy_dynflow_core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.fm1_15.el7sat"}]}],"bundled":22}],"products":[{"vendor":"foreman","product":"foreman"},{"vendor":"the foreman","product":"foreman"},{"vendor":"theforeman","product":"foreman"}],"references":[{"url":"https://github.com/theforeman/foreman/commit/5f606e11cf39719bf62f8b1f3396861b32387905","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7078","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://www.securityfocus.com/bid/96385","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://theforeman.org/security.html#2016-7078","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://projects.theforeman.org/issues/16982","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://seclists.org/oss-sec/2017/q1/470","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7078","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-c2qx-mg67-hwxr"},{"url":"https://access.redhat.com/errata/RHSA-2018:0336","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.3/html/release_notes/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1019214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1133515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1140671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1145653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1177766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1187338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1190002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1215825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1217523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1255484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1263748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1270771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1274159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1284686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1304608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1309569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1309944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376134","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1384146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1384548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1422458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1426404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1426411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1426448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1428761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1429426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1435972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1438376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1480346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1480348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1480886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1493001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1493494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1517827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1529099","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0336.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6459","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8183","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8183","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8183","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1669","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1669","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1669","tags":["advisory"]},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3693","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3693","tags":["advisory"]},{"url":"http://projects.theforeman.org/issues/14635","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3696","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3696","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3696","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3704","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3704","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4451","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4451","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4995","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4995","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4995","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4996","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4996","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6319","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6319","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385777","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7077","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386244","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7078","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1387232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8613","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391520","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9593","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9593","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9595","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9595","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9595","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452651","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2295","tags":["advisory"]},{"url":"https://puppet.com/security/cve/cve-2017-2295","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2667","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2667","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2667","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2672","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2672","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2672","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15699","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15699","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623719","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14623","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2016-7078","description":"foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion.","status":"published","published":"2018-09-10T15:00:00Z","modified":"2024-08-06T01:50:47.463Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:33:36.483151Z"}],"euvd":[{"id":"EUVD-2016-7958","description":"foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion.","status":"published","published":"2018-09-10T15:00:00Z","modified":"2024-08-06T01:50:47Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T02:22:34.032839Z"}],"ghsa":[{"id":"GHSA-c2qx-mg67-hwxr","title":"foreman before version 1.15.0 is vulnerable to an information leak through organizations and...","description":"foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion.","status":"published","published":"2022-05-13T01:38:41Z","modified":"2023-02-01T05:08:54Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:53.268012Z"}],"nvd":[{"id":"CVE-2016-7078","description":"foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion.","status":"published","published":"2018-09-10T15:29:04.28Z","modified":"2026-06-17T00:52:33.237Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-285","CWE-200"],"updated_at":"2026-11-02T14:03:39.621168Z"}],"osv":[{"id":"CVE-2016-7078","description":"foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion.","status":"published","published":"2018-09-10T15:29:04.28Z","modified":"2026-10-24T10:49:24.568834331Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"RHSA-2018:0336","title":"Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T00:59:34Z","modified":"2026-07-01T10:03:22Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"}]}}