Unscored CVE-2015-3163 EUVD-2015-3241GHSA-xmgx-c8hv-cpmg

The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated user…

Published Sep 6, 2017 · Updated Aug 6, 2024 · Assigned by redhat

Description

The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types via navigating to $BEAKER/powertypes and $BEAKER/keytypes respectively.

References

[oss-security] 20150507 beaker vulns fixed in version 20.1 mailing-list
https://beaker-project.org/jenkins-results/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html
https://bugzilla.redhat.com/show_bug.cgi?id=1215034
74567 vdb-entry