VULNERABILITY INTELLIGENCE

CVE-2016-7077

CVSS score4.3 MEDIUM
EPSS probability1.37%
CISA KEVNot currently listed
Published2018-09-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-285: Improper Authorization

Primary references