CVE-2026-5138

Katalog CVE

CVSS 4.3 · Medium EPSS 0,38%

Kerentanan Authorization Bypass Through User-Controlled Key pada redhat satellite, theforeman foreman. Skor CVSS 3.1 4.3 (Medium) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller method does not properly validate organization and location IDs from nested request parameters, bypassing existing authorization checks. This allows the user to leak sensitive infrastructure metadata, including subnet topology, IP ranges, gateways, DNS servers, and VLAN IDs, from organizations and locations they are not authorized to access.

Rincian

Terbit di NVD

1 Juli 2026

Terakhir diubah

9 Juli 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber redhat.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-639: Authorization Bypass Through User-Controlled Key

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 30,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2026:34365 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:34366 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:34367 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:34368 advisory vendor
• https://access.redhat.com/security/cve/CVE-2026-5138 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2452971 issue tracking · advisory vendor