What’s Vulnerable › Vulnerabilities
CVE-2015-1844
- Severity: medium (CVSS 4.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2015-08-14 · updated 2026-06-17
- Weakness: CWE-264
Description
Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API.
Affected products
- foreman: through 1.7.4
References
- http://projects.theforeman.org/issues/9947
- https://access.redhat.com/errata/RHSA-2015:1591
- https://access.redhat.com/errata/RHSA-2015:1592
- https://github.com/theforeman/foreman/pull/2273
- https://groups.google.com/forum/#%21topic/foreman-announce/37KYWhIk4FY
- https://groups.google.com/forum/#%21topic/foreman-users/qAGZh5n6n6M
- http://projects.theforeman.org/issues/9947
- https://access.redhat.com/errata/RHSA-2015:1591
- https://access.redhat.com/errata/RHSA-2015:1592
- https://github.com/theforeman/foreman/pull/2273
- https://groups.google.com/forum/#%21topic/foreman-announce/37KYWhIk4FY
- https://groups.google.com/forum/#%21topic/foreman-users/qAGZh5n6n6M
Get alerted when CVE-2015-1844 or the next vulnerability affects your stack