CVEvulnerability
CVE-2015-3163
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-284
Description
The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types via navigating to $BEAKER/powertypes and $BEAKER/keytypes respectively.
Affected configurations
• redhat beaker (<= 19.3)
• redhat beaker 20.0
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www.openwall.com/lists/oss-security/2015/05/08/1 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/74567 Third Party Advisory, VDB Entry
- https://beaker-project.org/jenkins-results/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html Release Notes, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1215034 Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2015/05/08/1 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/74567 Third Party Advisory, VDB Entry
- https://beaker-project.org/jenkins-results/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html Release Notes, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1215034 Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry