Back to bug 1302699

Who When What Removed Added
Martin Prpič 2016-01-28 12:13:56 UTC CC security-response-team
Red Hat Bugzilla 2016-01-28 12:13:56 UTC Doc Type --- Bug Fix
Martin Prpič 2016-02-02 07:43:50 UTC Summary EMBARGOED CVE-2016-2048 python-django: user with "change" but not "add" permission can create objects for ModelAdmin CVE-2016-2048 python-django: user with "change" but not "add" permission can create objects for ModelAdmin
Martin Prpič 2016-02-02 07:43:52 UTC Group security, qe_staff
Martin Prpič 2016-02-02 07:44:22 UTC Status NEW CLOSED
Resolution --- NOTABUG
Last Closed 2016-02-02 02:44:22 UTC
Product Security DevOps Team 2019-09-29 13:43:28 UTC Whiteboard impact=low,public=20160201,reported=20160125,source=upstream,cvss2=3.5/AV:N/AC:M/Au:S/C:N/I:P/A:N,openstack-5/python-django=notaffected,openstack-6/python-django=notaffected,openstack-7/python-django=notaffected,openstack-7-optools/python-django=notaffected,openstack-8/python-django=notaffected,openstack-8-optools/python-django=notaffected,openstack-rdo/python-django=notaffected,ceph-1.2/Django=notaffected,ceph-1.3/Django=notaffected,sam-1/Django=notaffected,fedora-all/python-django=notaffected,epel-6/Django14=notaffected,epel-6/python-django15=notaffected,epel-7/python-django=notaffected

Back to bug 1302699