CVE-2016-2100

Impact:
Moderate
Public Date:
2015-02-13
CWE:
CWE-200
Bugzilla:
1310675: CVE-2016-2100 foreman: Unprivileged user can access private bookmarks of other users
It was found that access to private bookmarks of users is not properly restricted in Foreman. This could allow an attacker to view the search terms used in these bookmarks which should be private.

Find out more about CVE-2016-2100 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v2 metrics

Base Score 5.5
Base Metrics AV:N/AC:L/Au:S/C:P/I:P/A:N
Access Vector Network
Access Complexity Low
Authentication Single
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact None

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
Red Hat Satellite Capsule 6.1 RHBA-2016:1500 2016-07-27
Red Hat Satellite 6.1 - Optional RHBA-2016:1500 2016-07-27
Red Hat Satellite Capsule 6.2 RHBA-2016:1500 2016-07-27
Red Hat Satellite 6.2 RHBA-2016:1500 2016-07-27

Affected Packages State

Platform Package State
Red Hat Satellite 6 foreman Will not fix
Red Hat Ceph Storage 1.3 foreman Will not fix
OpenStack 6 Installer for RHEL 7 foreman Will not fix

Last Modified
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.