CVE-2016-4475

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-4475
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4475.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-4475
Downstream
Published
2016-08-19T21:59:09.430Z
Modified
2025-12-11T01:53:15.577739Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) delete arbitrary organizations or locations via unspecified vectors.

References

Affected packages

Git

github.com/theforeman/foreman

Affected ranges

Type
GIT
Repo
https://github.com/theforeman/foreman
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
522fa90e2953631719364921d4985d06f912a42e
Last affected
e5bc9dbeb1e87a804516946eff2793154bf802fa

Affected versions

0.*

0.1
0.1-1
0.1-2
0.1-3
0.1-4
0.1-5
0.1-6
0.2
0.2rc1
0.3
0.4
0.4rc2
0.4rc3
0.4rc4
0.4rc5

1.*

1.0
1.0RC1
1.0RC2
1.0RC3
1.0RC4
1.0RC5
1.1
1.11.0
1.11.0-RC1
1.11.0-RC2
1.11.0-RC3
1.11.1
1.11.2
1.11.3
1.12.0
1.12.0-RC1
1.12.0-RC2
1.12.0-RC3
1.1RC1
1.1RC2
1.1RC3
1.1RC4
1.1RC5

github.com/theforeman/foreman-installer

Affected ranges

Type
GIT
Repo
https://github.com/theforeman/foreman-installer
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ae2ac4e445bdd0541651a9b15e94648eb5fcd34a
Last affected
cb9fb7623300ceed98e2512e5734f5ebac7d0a93

Affected versions

1.*

1.0.1
1.11.0
1.11.0-RC1
1.11.0-RC2
1.11.0-RC3
1.11.1
1.11.2
1.11.3
1.12.0
1.12.0-RC1
1.12.0-RC2
1.12.0-RC3

github.com/theforeman/smart-proxy

Affected ranges

Type
GIT
Repo
https://github.com/theforeman/smart-proxy
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d667afe8456c69534f2de0d84a0a95df872e8e7d
Last affected
fb319164de15280fb59bc25448d7f00d86703d15

Affected versions

0.*

0.1
0.2
0.2rc2
0.3
0.3.1

1.*

1.0
1.0RC1
1.0RC2
1.1
1.11.0
1.11.0-RC1
1.11.0-RC2
1.11.0-RC3
1.11.1
1.11.2
1.11.3
1.12.0
1.12.0-RC1
1.12.0-RC2
1.12.0-RC3
1.1RC1
1.1RC2
1.1RC3