Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Foreman: excessive permissions for viewer role on preview (Red Hat Red Hat Satellite 6.16 for RHEL 8)

CVE-2026-96659
CRITICAL 9.1

At a glance

Source
NVD
EPSS
EPSS 0.35 % · percentile 28 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Analyzed

Search on…

Description

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root passwords. Furthermore, under insecure system configurations where Safemode protections are disabled, the flaw may allow the user to execute arbitrary commands as the Foreman system account.

Weaknesses (CWE)

  • CWE-267 — Privilege Defined With Unsafe Actions

References

Scores

VersionScoreVectorScored by
CVSS 3.1CRITICAL 9.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:Lredhat
CVSS 3.1CRITICAL 9.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:LNVD · secalert@redhat.com (Secondary)

European references

Affected configurations (NVD CPE)

Affected products

ProductVersions
Red Hat · Red Hat Satellite 6.16 for RHEL 8unaffected 0:3.12.0.23-1.el8sat < *
Red Hat · Red Hat Satellite 6.16 for RHEL 9unaffected 0:3.12.0.23-1.el9sat < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:3.14.0.22-1.el9sat < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:3.2.13-1.el9pc < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:3.1.62-1.el9pc < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:5.3.1-2.el9pc < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:0.6.0-1.el9pc < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:15.0.2-2.el9sat < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:3.14.0-2.el9sat < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:4.16.0.20-1.el9sat < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:1.5.0-2.el9sat < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:6.17.12-1.el9sat < *
Red Hat · Red Hat Satellite 6.17 for RHEL 9unaffected 0:0.1.0-2.1.el9sat < *
Red Hat · Red Hat Satellite 6.18 for RHEL 9unaffected 0:3.16.0.25-1.el9sat < *
Red Hat · Red Hat Satellite 6.19 for RHEL 9unaffected 0:3.18.0.14-1.el9sat < *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD