What’s Vulnerable › Vulnerabilities

CVE-2017-2662

• Severity: medium (CVSS 4.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-22 · updated 2026-06-17
• Weakness: CWE-862

Description

A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.

Affected products

• Katello: 3.4.5

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662
• https://projects.theforeman.org/issues/18838
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662
• https://projects.theforeman.org/issues/18838

Get alerted when CVE-2017-2662 or the next vulnerability affects your stack