CVE-2017-7540 | BDVDB-2026-87980 Detail

Red Hatrubygem-safemode

Description#

rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-184

References#

https://github.com/svenfuchs/safemode/pull/23

Exploit#

No public exploit known

History#

Version 12017-07-21Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.