VULNERABILITY INTELLIGENCE

CVE-2015-5246

CVSS score8.1 HIGH
EPSS probability1.42%
CISA KEVNot currently listed
Published2017-10-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors involving the password lifetime period in Active Directory.

Primary references