CVE-2016-4451

MEDIUM Year: 2016
CVSS v3 Score
5.0
Medium
CVSS v2 Score
6.0
Medium
Weakness Type
CWE-254
View all →

Vulnerability Description

The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unlimited filters to bypass organization and location restrictions and read or modify data for an arbitrary organization by leveraging knowledge of the id of that organization.

Related Vulnerabilities

CVE-2015-8615

MEDIUM
CVSS:5.0(Medium)

The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to c...

CWE-2542015

CVE-2016-9347

MEDIUM
CVSS:5.0(Medium)

An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV Wireless I/O Cards (WIOC) running the firmware available in the De...

CWE-2542016

CVE-2016-3320

MEDIUM
CVSS:4.9(Medium)

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (1) administrative or ...

CWE-2542016

CVE-2010-1776

MEDIUM
CVSS:4.8(Medium)

Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch (2nd generation) and later, when Find My iPhone is disabled, allows remote authenticated users ...

CWE-2542010

CVE-2016-10932

MEDIUM
CVSS:4.8(Medium)

An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification was omitted.

CWE-2542016

CVE-2014-1428

MEDIUM
CVSS:5.3(Medium)

A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.

CWE-2542014