CVE-2016-4475

The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) delete arbitrary organizations or locations via unspecified vectors.

• CWE-254

• http://projects.theforeman.org/issues/15268Patch, Vendor Advisory
• http://projects.theforeman.org/projects/foreman/repository/revisions/a30ab44ed6f140f1791afc51a1e448afc2ff28f9Patch, Vendor Advisory
• http://www.securityfocus.com/bid/92125Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHBA-2016:1615
• https://theforeman.org/security.html#2016-4475Vendor Advisory
• http://projects.theforeman.org/issues/15268Patch, Vendor Advisory
• http://projects.theforeman.org/projects/foreman/repository/revisions/a30ab44ed6f140f1791afc51a1e448afc2ff28f9Patch, Vendor Advisory
• http://www.securityfocus.com/bid/92125Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHBA-2016:1615
• https://theforeman.org/security.html#2016-4475Vendor Advisory

Published

Aug 19, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4469Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2016-4470The key_reject_and_link function in security/keys/key.c in t…
• CVE-2016-4471ManageIQ in CloudForms before 4.1 allows remote authenticate…
• CVE-2016-4472The overflow protection in Expat is removed by compilers wit…8.1
• CVE-2016-4473/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote…
• CVE-2016-4474The image build process for the overcloud images in Red Hat …
• CVE-2016-4476hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2…7.5
• CVE-2016-4477wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r c…
• CVE-2016-4478Buffer overflow in the xmlrpc_char_encode function in module…
• CVE-2016-4480The guest_walk_tables function in arch/x86/mm/guest_walk.c i…
• CVE-2016-4482The proc_connectinfo function in drivers/usb/core/devio.c in…
• CVE-2016-4483The xmlBufAttrSerializeTxtContent function in xmlsave.c in l…7.5