CVE-2016-7077

PoC —

CVSS 3.0

4.3 medium

EPSS

1%p70

Published

Sep 10, 2018 (Sep 10, 2018)

Modified

Jun 17, 2026

Description

foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.

Vendors: theforeman
Products: foreman
Weakness: CWE-285, CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.