CVE-2014-8183

7.4 highEPSS 0.7%

High (7.4). EPSS 0.7% chance of exploitation in the next 30 days.

It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2019-08-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:satellite
theforeman:foreman

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8183
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8183

Check your stack JSON