https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:40:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-92904 <p><strong>Affected:</strong> Red Hat Satellite 6</p> <p>A flaw was found in the foreman_remote_execution plugin&#39;s template invocations controller. The show_template_invocation_by_host action resolves the job invocation by ID without evaluating the caller&#39;s view_job_invocations permission filter against the record. An authenticated user whose job invocation visibility is restricted by a permission filter can enumerate job invocation IDs and read the live output, rendered script, and input values for other users&#39; job invocations within their own organizations.</p> <p><strong>Affected:</strong> Red Hat Satellite 6</p> <p>A flaw was found in the foreman_remote_execution plugin&#39;s template invocations controller. The show_template_invocation_by_host action resolves the job invocation by ID without evaluating the caller&#39;s view_job_invocations permission filter against the record. An authenticated user whose job invocation visibility is restricted by a permission filter can enumerate job invocation IDs and read the live output, rendered script, and input values for other users&#39; job invocations within their own organizations.</p> https://vulnerability.circl.lu/vuln/cve-2026-92904