VULNERABILITY INTELLIGENCE

CVE-2018-14666

CVSS score6.8 MEDIUM

EPSS probability1.05%

CISA KEVNot currently listed

Published2019-01-22

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.

Weakness classification

CWE-285: Improper Authorization
CWE-863: Incorrect Authorization

Primary references

secalert@redhat.com — Third Party Advisory
secalert@redhat.com — Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Vendor Advisory