github - GHSA-cpv6-pfq6-j2v7

GHSA-cpv6-pfq6-j2v7

Vulnerability from github

Published

2022-05-13 01:36

Modified

2023-01-27 00:52

Severity ?

4.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

katello Improper Privilege Management vulnerability

Details

A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "RubyGems",
        "name": "katello"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.17.0.rc1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2017-2662"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-269"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2023-01-27T00:52:53Z",
    "nvd_published_at": "2018-08-22T16:29:00Z",
    "severity": "MODERATE"
  },
  "details": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.",
  "id": "GHSA-cpv6-pfq6-j2v7",
  "modified": "2023-01-27T00:52:53Z",
  "published": "2022-05-13T01:36:51Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2662"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Katello/katello/pull/8772"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Katello/katello/commit/853260e3e9f94179d5881199e7885d1c08e600f6"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/Katello/katello"
    },
    {
      "type": "WEB",
      "url": "https://projects.theforeman.org/issues/18838"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "katello Improper Privilege Management vulnerability"
}

gsd-2017-2662

Vulnerability from gsd

Modified

2022-05-13 00:00

Details

Aliases

CVE-2017-2662

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2017-2662",
    "description": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.",
    "id": "GSD-2017-2662",
    "references": [
      "https://access.redhat.com/errata/RHSA-2021:1313"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "affected": [
        {
          "package": {
            "ecosystem": "RubyGems",
            "name": "katello",
            "purl": "pkg:gem/katello"
          }
        }
      ],
      "aliases": [
        "CVE-2017-2662",
        "GHSA-cpv6-pfq6-j2v7"
      ],
      "details": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting\na new role to allow restricted access on a repository with a filter (filter set\non the Product Name), the filter is not respected when the actions are done via\nhammer using the repository id.\n",
      "id": "GSD-2017-2662",
      "modified": "2022-05-13T00:00:00.000Z",
      "published": "2022-05-13T00:00:00.000Z",
      "references": [
        {
          "type": "WEB",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
        },
        {
          "type": "WEB",
          "url": "https://projects.theforeman.org/issues/18838"
        },
        {
          "type": "WEB",
          "url": "https://github.com/Katello/katello/pull/8772"
        },
        {
          "type": "WEB",
          "url": "https://github.com/Katello/katello/commit/853260e3e9f94179d5881199e7885d1c08e600f6"
        }
      ],
      "schema_version": "1.4.0",
      "severity": [
        {
          "score": 4.3,
          "type": "CVSS_V3"
        }
      ],
      "summary": "katello Improper Privilege Management vulnerability"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2017-2662",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "foreman katello plugin",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "3.4.5"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "The Foreman Project"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-862",
                "lang": "eng",
                "value": "CWE-862"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
          },
          {
            "name": "https://projects.theforeman.org/issues/18838",
            "refsource": "MISC",
            "url": "https://projects.theforeman.org/issues/18838"
          }
        ]
      }
    },
    "github.com/rubysec/ruby-advisory-db": {
      "cve": "2017-2662",
      "cvss_v3": 4.3,
      "date": "2022-05-13",
      "description": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting\na new role to allow restricted access on a repository with a filter (filter set\non the Product Name), the filter is not respected when the actions are done via\nhammer using the repository id.\n",
      "gem": "katello",
      "ghsa": "cpv6-pfq6-j2v7",
      "patched_versions": [
        "\u003e= 3.17.0.rc1"
      ],
      "related": {
        "url": [
          "https://projects.theforeman.org/issues/18838",
          "https://github.com/Katello/katello/pull/8772",
          "https://github.com/Katello/katello/commit/853260e3e9f94179d5881199e7885d1c08e600f6"
        ]
      },
      "title": "katello Improper Privilege Management vulnerability",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "=3.4.5",
          "affected_versions": "Version 3.4.5",
          "cvss_v2": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "cvss_v3": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-269",
            "CWE-937"
          ],
          "date": "2019-10-09",
          "description": "A flaw was found in Foreman\u0027s katello plugin. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.",
          "fixed_versions": [
            "3.5.0"
          ],
          "identifier": "CVE-2017-2662",
          "identifiers": [
            "CVE-2017-2662"
          ],
          "not_impacted": "All versions before 3.4.5, all versions after 3.4.5",
          "package_slug": "gem/katello",
          "pubdate": "2018-08-22",
          "solution": "Upgrade to version 3.5.0 or above.",
          "title": "Improper Privilege Management",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2017-2662",
            "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662",
            "https://projects.theforeman.org/issues/18838"
          ],
          "uuid": "ceebda08-c643-4e96-86db-b8c56172f334"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:theforeman:katello:3.4.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2017-2662"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-862"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://projects.theforeman.org/issues/18838",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://projects.theforeman.org/issues/18838"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Third Party Advisory"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4
        }
      },
      "lastModifiedDate": "2023-02-12T23:29Z",
      "publishedDate": "2018-08-22T16:29Z"
    }
  }
}

cve-2017-2662

Vulnerability from cvelistv5

Published

2018-08-22 16:00

Modified

2024-08-05 14:02

Severity ?

4.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662	x_refsource_CONFIRM
	https://projects.theforeman.org/issues/18838	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	The Foreman Project	foreman katello plugin

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:02:07.107Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://projects.theforeman.org/issues/18838"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "foreman katello plugin",
          "vendor": "The Foreman Project",
          "versions": [
            {
              "status": "affected",
              "version": "3.4.5"
            }
          ]
        }
      ],
      "datePublic": "2017-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in Foreman\u0027s katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-08-22T15:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://projects.theforeman.org/issues/18838"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-2662",
    "datePublished": "2018-08-22T16:00:00",
    "dateReserved": "2016-12-01T00:00:00",
    "dateUpdated": "2024-08-05T14:02:07.107Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

GHSA-cpv6-pfq6-j2v7

Vulnerability from github

gsd-2017-2662

Vulnerability from gsd

cve-2017-2662

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature