Bug 1385777 (CVE-2016-7077)

Summary:	CVE-2016-7077 foreman: Foreman information leak through unauthorized multiple_checkboxes helper
Product:	[Other] Security Response	Reporter:	Adam Mariš <amaris>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	apevec, bkearney, cbillett, ceph-eng-bugs, chrisw, cvsbot-xmlrpc, jjoyce, jmatthew, jschluet, lhh, lpeer, markmc, mburns, mmccune, ohadlevy, rbryant, satellite6-bugs, sclewis, sisharma, srevivo, tdecacqu, tlestach, tsanders
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	foreman 1.14.0	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-10-21 00:55:24 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1391131, 1391140, 1399324
Bug Blocks:	1385778, 1432306

Description Adam Mariš 2016-10-17 16:34:11 UTC

Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.

Affects Foreman since at least version 1.8.

Upstream bug:

http://projects.theforeman.org/issues/16971

Comment 1 Adam Mariš 2016-10-17 16:34:35 UTC

Acknowledgments:

Name: the Foreman project
Upstream: Jitendra Yejare