github - GHSA-cpv6-pfq6-j2v7

GHSA-cpv6-pfq6-j2v7

Vulnerability from github

Published

2022-05-13 01:36

Modified

2023-01-27 00:52

Severity

4.3 (Medium) - CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

katello Improper Privilege Management vulnerability

Details

A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "RubyGems",
        "name": "katello"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.17.0.rc1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2017-2662"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-269"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2023-01-27T00:52:53Z",
    "nvd_published_at": "2018-08-22T16:29:00Z",
    "severity": "MODERATE"
  },
  "details": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.",
  "id": "GHSA-cpv6-pfq6-j2v7",
  "modified": "2023-01-27T00:52:53Z",
  "published": "2022-05-13T01:36:51Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2662"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Katello/katello/pull/8772"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Katello/katello/commit/853260e3e9f94179d5881199e7885d1c08e600f6"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/Katello/katello"
    },
    {
      "type": "WEB",
      "url": "https://projects.theforeman.org/issues/18838"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "katello Improper Privilege Management vulnerability"
}

gsd-2017-2662

Vulnerability from gsd

Modified

2022-05-13 00:00

Details

Aliases

CVE-2017-2662

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2017-2662",
    "description": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.",
    "id": "GSD-2017-2662",
    "references": [
      "https://access.redhat.com/errata/RHSA-2021:1313"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "affected": [
        {
          "package": {
            "ecosystem": "RubyGems",
            "name": "katello",
            "purl": "pkg:gem/katello"
          }
        }
      ],
      "aliases": [
        "CVE-2017-2662",
        "GHSA-cpv6-pfq6-j2v7"
      ],
      "details": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting\na new role to allow restricted access on a repository with a filter (filter set\non the Product Name), the filter is not respected when the actions are done via\nhammer using the repository id.\n",
      "id": "GSD-2017-2662",
      "modified": "2022-05-13T00:00:00.000Z",
      "published": "2022-05-13T00:00:00.000Z",
      "references": [
        {
          "type": "WEB",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
        },
        {
          "type": "WEB",
          "url": "https://projects.theforeman.org/issues/18838"
        },
        {
          "type": "WEB",
          "url": "https://github.com/Katello/katello/pull/8772"
        },
        {
          "type": "WEB",
          "url": "https://github.com/Katello/katello/commit/853260e3e9f94179d5881199e7885d1c08e600f6"
        }
      ],
      "schema_version": "1.4.0",
      "severity": [
        {
          "score": 4.3,
          "type": "CVSS_V3"
        }
      ],
      "summary": "katello Improper Privilege Management vulnerability"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2017-2662",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "foreman katello plugin",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "3.4.5"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "The Foreman Project"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-862",
                "lang": "eng",
                "value": "CWE-862"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
          },
          {
            "name": "https://projects.theforeman.org/issues/18838",
            "refsource": "MISC",
            "url": "https://projects.theforeman.org/issues/18838"
          }
        ]
      }
    },
    "github.com/rubysec/ruby-advisory-db": {
      "cve": "2017-2662",
      "cvss_v3": 4.3,
      "date": "2022-05-13",
      "description": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting\na new role to allow restricted access on a repository with a filter (filter set\non the Product Name), the filter is not respected when the actions are done via\nhammer using the repository id.\n",
      "gem": "katello",
      "ghsa": "cpv6-pfq6-j2v7",
      "patched_versions": [
        "\u003e= 3.17.0.rc1"
      ],
      "related": {
        "url": [
          "https://projects.theforeman.org/issues/18838",
          "https://github.com/Katello/katello/pull/8772",
          "https://github.com/Katello/katello/commit/853260e3e9f94179d5881199e7885d1c08e600f6"
        ]
      },
      "title": "katello Improper Privilege Management vulnerability",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "=3.4.5",
          "affected_versions": "Version 3.4.5",
          "cvss_v2": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "cvss_v3": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-269",
            "CWE-937"
          ],
          "date": "2019-10-09",
          "description": "A flaw was found in Foreman\u0027s katello plugin. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.",
          "fixed_versions": [
            "3.5.0"
          ],
          "identifier": "CVE-2017-2662",
          "identifiers": [
            "CVE-2017-2662"
          ],
          "not_impacted": "All versions before 3.4.5, all versions after 3.4.5",
          "package_slug": "gem/katello",
          "pubdate": "2018-08-22",
          "solution": "Upgrade to version 3.5.0 or above.",
          "title": "Improper Privilege Management",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2017-2662",
            "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662",
            "https://projects.theforeman.org/issues/18838"
          ],
          "uuid": "ceebda08-c643-4e96-86db-b8c56172f334"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:theforeman:katello:3.4.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2017-2662"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-862"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://projects.theforeman.org/issues/18838",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://projects.theforeman.org/issues/18838"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Third Party Advisory"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4
        }
      },
      "lastModifiedDate": "2023-02-12T23:29Z",
      "publishedDate": "2018-08-22T16:29Z"
    }
  }
}

cve-2017-2662

Vulnerability from cvelistv5

Published

2018-08-22 16:00

Modified

2024-08-05 14:02

Severity

4.3 (Medium) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

References

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662	x_refsource_CONFIRM
https://projects.theforeman.org/issues/18838	x_refsource_CONFIRM

Impacted products

Vendor	Product
The Foreman Project	foreman katello plugin

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:02:07.107Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://projects.theforeman.org/issues/18838"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "foreman katello plugin",
          "vendor": "The Foreman Project",
          "versions": [
            {
              "status": "affected",
              "version": "3.4.5"
            }
          ]
        }
      ],
      "datePublic": "2017-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-08-22T15:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://projects.theforeman.org/issues/18838"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-2662",
    "datePublished": "2018-08-22T16:00:00",
    "dateReserved": "2016-12-01T00:00:00",
    "dateUpdated": "2024-08-05T14:02:07.107Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Action not permitted

GHSA-cpv6-pfq6-j2v7

Vulnerability from github

gsd-2017-2662

Vulnerability from gsd

cve-2017-2662

Vulnerability from cvelistv5

Tags