CVE-2017-7505

Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted by these permissions on all administrator user object outside of their scope, such as editing global admin accounts including changing their passwords.

• CWE-863
• CWE-269

• http://projects.theforeman.org/issues/19612Issue Tracking, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98607Third Party Advisory, VDB Entry
• https://github.com/theforeman/foreman/pull/4545Patch, Vendor Advisory
• http://projects.theforeman.org/issues/19612Issue Tracking, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98607Third Party Advisory, VDB Entry
• https://github.com/theforeman/foreman/pull/4545Patch, Vendor Advisory

Published

May 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7499Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-7500It was found that rpm did not properly handle RPM installati…7.3
• CVE-2017-7501It was found that versions of rpm before 4.13.0.2 use tempor…
• CVE-2017-7502Null pointer dereference vulnerability in NSS since 3.24.0 w…
• CVE-2017-7503It was found that the Red Hat JBoss EAP 7.0.5 implementation…
• CVE-2017-7504HTTPServerILServlet.java in JMS over HTTP Invocation Layer o…
• CVE-2017-7506spice versions though 0.13 are vulnerable to out-of-bounds m…
• CVE-2017-7507GnuTLS version 3.5.12 and earlier is vulnerable to a NULL po…
• CVE-2017-7508OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerab…
• CVE-2017-7509An input validation error was found in Red Hat Certificate S…3.5
• CVE-2017-7510In ovirt-engine 4.1, if a host was provisioned with cloud-in…8.8
• CVE-2017-7511poppler since version 0.17.3 has been vulnerable to NULL poi…