CVEvulnerability
CVE-2015-5246
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-10-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-254
Description
The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors involving the password lifetime period in Active Directory.
Affected configurations
• theforeman foreman 1.9.0
Related
Weakness · not in database (1)
References
- http://projects.theforeman.org/issues/11471 Issue Tracking, Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1258700 Issue Tracking
- http://projects.theforeman.org/issues/11471 Issue Tracking, Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1258700 Issue Tracking