{"id":"CVE-2017-7505","details":"Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted by these permissions on all administrator user object outside of their scope, such as editing global admin accounts including changing their passwords.","modified":"2026-07-08T12:28:24.973518Z","published":"2017-05-26T16:29:00.307Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/98607"},{"type":"FIX","url":"http://projects.theforeman.org/issues/19612"},{"type":"FIX","url":"https://github.com/theforeman/foreman/pull/4545"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/theforeman/foreman","events":[{"introduced":"78ccdb2bcdb386618503afec4f465f58abfe619e"},{"last_affected":"5bf9ec650d1f6c4133e5fa45e24e4c85e9fd4b90"}],"database_specific":{"extracted_events":[{"introduced":"1.5.0"},{"last_affected":"1.5.0"},{"introduced":"1.5.0-rc1"},{"last_affected":"1.5.0-rc1"},{"introduced":"1.5.0-rc2"},{"last_affected":"1.5.0-rc2"},{"introduced":"1.5.1"},{"last_affected":"1.5.1"},{"introduced":"1.5.2"},{"last_affected":"1.5.2"},{"introduced":"1.5.3"},{"last_affected":"1.5.3"},{"introduced":"1.6.0"},{"last_affected":"1.6.0"},{"introduced":"1.6.0-rc1"},{"last_affected":"1.6.0-rc1"},{"introduced":"1.6.0-rc2"},{"last_affected":"1.6.0-rc2"},{"introduced":"1.6.1"},{"last_affected":"1.6.1"},{"introduced":"1.6.3"},{"last_affected":"1.6.3"},{"introduced":"1.7.0"},{"last_affected":"1.7.0"},{"introduced":"1.7.0-rc1"},{"last_affected":"1.7.0-rc1"},{"introduced":"1.7.0-rc2"},{"last_affected":"1.7.0-rc2"},{"introduced":"1.7.1"},{"last_affected":"1.7.1"},{"introduced":"1.7.2"},{"last_affected":"1.7.2"},{"introduced":"1.7.3"},{"last_affected":"1.7.3"},{"introduced":"1.7.4"},{"last_affected":"1.7.4"},{"introduced":"1.7.5"},{"last_affected":"1.7.5"},{"introduced":"1.8.0"},{"last_affected":"1.8.0"},{"introduced":"1.8.0-rc1"},{"last_affected":"1.8.0-rc1"},{"introduced":"1.8.0-rc2"},{"last_affected":"1.8.0-rc2"},{"introduced":"1.8.0-rc3"},{"last_affected":"1.8.0-rc3"},{"introduced":"1.8.1"},{"last_affected":"1.8.1"},{"introduced":"1.8.2"},{"last_affected":"1.8.2"},{"introduced":"1.8.3"},{"last_affected":"1.8.3"},{"introduced":"1.8.4"},{"last_affected":"1.8.4"},{"introduced":"1.9.0"},{"last_affected":"1.9.0"},{"introduced":"1.9.0-rc1"},{"last_affected":"1.9.0-rc1"},{"introduced":"1.9.0-rc2"},{"last_affected":"1.9.0-rc2"},{"introduced":"1.9.0-rc3"},{"last_affected":"1.9.0-rc3"},{"introduced":"1.9.1"},{"last_affected":"1.9.1"},{"introduced":"1.9.2"},{"last_affected":"1.9.2"},{"introduced":"1.9.3"},{"last_affected":"1.9.3"},{"introduced":"1.10.0"},{"last_affected":"1.10.0"},{"introduced":"1.10.0-rc1"},{"last_affected":"1.10.0-rc1"},{"introduced":"1.10.0-rc2"},{"last_affected":"1.10.0-rc2"},{"introduced":"1.10.0-rc3"},{"last_affected":"1.10.0-rc3"},{"introduced":"1.10.1"},{"last_affected":"1.10.1"},{"introduced":"1.10.2"},{"last_affected":"1.10.2"},{"introduced":"1.10.3"},{"last_affected":"1.10.3"},{"introduced":"1.10.4"},{"last_affected":"1.10.4"},{"introduced":"1.11.0"},{"last_affected":"1.11.0"},{"introduced":"1.11.0-rc1"},{"last_affected":"1.11.0-rc1"},{"introduced":"1.11.0-rc2"},{"last_affected":"1.11.0-rc2"},{"introduced":"1.11.0-rc3"},{"last_affected":"1.11.0-rc3"},{"introduced":"1.11.1"},{"last_affected":"1.11.1"},{"introduced":"1.11.2"},{"last_affected":"1.11.2"},{"introduced":"1.11.3"},{"last_affected":"1.11.3"},{"introduced":"1.11.4"},{"last_affected":"1.11.4"},{"introduced":"1.12.0"},{"last_affected":"1.12.0"},{"introduced":"1.12.0-rc1"},{"last_affected":"1.12.0-rc1"},{"introduced":"1.12.0-rc2"},{"last_affected":"1.12.0-rc2"},{"introduced":"1.12.0-rc3"},{"last_affected":"1.12.0-rc3"},{"introduced":"1.12.1"},{"last_affected":"1.12.1"},{"introduced":"1.12.2"},{"last_affected":"1.12.2"},{"introduced":"1.12.3"},{"last_affected":"1.12.3"},{"introduced":"1.12.4"},{"last_affected":"1.12.4"},{"introduced":"1.13.0"},{"last_affected":"1.13.0"},{"introduced":"1.13.0-rc1"},{"last_affected":"1.13.0-rc1"},{"introduced":"1.13.0-rc2"},{"last_affected":"1.13.0-rc2"},{"introduced":"1.13.1"},{"last_affected":"1.13.1"},{"introduced":"1.13.2"},{"last_affected":"1.13.2"},{"introduced":"1.13.3"},{"last_affected":"1.13.3"},{"introduced":"1.13.4"},{"last_affected":"1.13.4"},{"introduced":"1.14.0"},{"last_affected":"1.14.0"},{"introduced":"1.14.0-rc1"},{"last_affected":"1.14.0-rc1"},{"introduced":"1.14.0-rc2"},{"last_affected":"1.14.0-rc2"},{"introduced":"1.14.0-rc3"},{"last_affected":"1.14.0-rc3"},{"introduced":"1.14.1"},{"last_affected":"1.14.1"},{"introduced":"1.14.2"},{"last_affected":"1.14.2"},{"introduced":"1.14.3"},{"last_affected":"1.14.3"},{"introduced":"1.15.0"},{"last_affected":"1.15.0"},{"introduced":"1.15.0-rc1"},{"last_affected":"1.15.0-rc1"},{"introduced":"1.15.0-rc2"},{"last_affected":"1.15.0-rc2"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:theforeman:foreman:1.5.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.5:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.15.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.15.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.15.0:rc2:*:*:*:*:*:*"]}}],"versions":["1.10.0","1.10.0-rc1","1.10.0-rc2","1.10.0-rc3","1.10.1","1.10.2","1.10.3","1.10.4","1.11.0","1.11.0-rc1","1.11.0-rc2","1.11.0-rc3","1.11.1","1.11.2","1.11.3","1.11.4","1.12.0","1.12.0-rc1","1.12.0-rc2","1.12.0-rc3","1.12.1","1.12.2","1.12.3","1.12.4","1.13.0","1.13.0-rc1","1.13.0-rc2","1.13.1","1.13.2","1.13.3","1.13.4","1.14.0","1.14.0-rc1","1.14.0-rc2","1.14.0-rc3","1.14.1","1.14.2","1.14.3","1.15.0","1.15.0-rc1","1.15.0-rc2","1.5.0","1.5.0-rc1","1.5.0-rc2","1.5.1","1.5.2","1.5.3","1.6.0","1.6.0-rc1","1.6.0-rc2","1.6.1","1.6.3","1.7.0","1.7.0-rc1","1.7.0-rc2","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.8.0","1.8.0-rc1","1.8.0-rc2","1.8.0-rc3","1.8.1","1.8.2","1.8.3","1.8.4","1.9.0","1.9.0-rc1","1.9.0-rc2","1.9.0-rc3","1.9.1","1.9.2","1.9.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7505.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/theforeman/foreman-installer","events":[{"introduced":"8f63d97fd89e583a43c6f5bad49d4683a09ecf53"},{"last_affected":"b4223a6da67ae60b28aa194b800a5ec4e8c828ae"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:theforeman:foreman:1.5.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.5:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.15.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.15.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.15.0:rc2:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.5.0"},{"last_affected":"1.5.0"},{"introduced":"1.5.0-rc1"},{"last_affected":"1.5.0-rc1"},{"introduced":"1.5.0-rc2"},{"last_affected":"1.5.0-rc2"},{"introduced":"1.5.1"},{"last_affected":"1.5.1"},{"introduced":"1.6.0"},{"last_affected":"1.6.0"},{"introduced":"1.6.0-rc1"},{"last_affected":"1.6.0-rc1"},{"introduced":"1.6.0-rc2"},{"last_affected":"1.6.0-rc2"},{"introduced":"1.6.3"},{"last_affected":"1.6.3"},{"introduced":"1.7.0"},{"last_affected":"1.7.0"},{"introduced":"1.7.0-rc1"},{"last_affected":"1.7.0-rc1"},{"introduced":"1.7.0-rc2"},{"last_affected":"1.7.0-rc2"},{"introduced":"1.7.1"},{"last_affected":"1.7.1"},{"introduced":"1.7.2"},{"last_affected":"1.7.2"},{"introduced":"1.7.3"},{"last_affected":"1.7.3"},{"introduced":"1.7.4"},{"last_affected":"1.7.4"},{"introduced":"1.7.5"},{"last_affected":"1.7.5"},{"introduced":"1.8.0"},{"last_affected":"1.8.0"},{"introduced":"1.8.0-rc1"},{"last_affected":"1.8.0-rc1"},{"introduced":"1.8.0-rc2"},{"last_affected":"1.8.0-rc2"},{"introduced":"1.8.0-rc3"},{"last_affected":"1.8.0-rc3"},{"introduced":"1.8.1"},{"last_affected":"1.8.1"},{"introduced":"1.8.2"},{"last_affected":"1.8.2"},{"introduced":"1.8.3"},{"last_affected":"1.8.3"},{"introduced":"1.8.4"},{"last_affected":"1.8.4"},{"introduced":"1.9.0"},{"last_affected":"1.9.0"},{"introduced":"1.9.0-rc1"},{"last_affected":"1.9.0-rc1"},{"introduced":"1.9.0-rc2"},{"last_affected":"1.9.0-rc2"},{"introduced":"1.9.0-rc3"},{"last_affected":"1.9.0-rc3"},{"introduced":"1.9.1"},{"last_affected":"1.9.1"},{"introduced":"1.9.2"},{"last_affected":"1.9.2"},{"introduced":"1.9.3"},{"last_affected":"1.9.3"},{"introduced":"1.10.0"},{"last_affected":"1.10.0"},{"introduced":"1.10.0-rc1"},{"last_affected":"1.10.0-rc1"},{"introduced":"1.10.0-rc2"},{"last_affected":"1.10.0-rc2"},{"introduced":"1.10.0-rc3"},{"last_affected":"1.10.0-rc3"},{"introduced":"1.10.1"},{"last_affected":"1.10.1"},{"introduced":"1.10.2"},{"last_affected":"1.10.2"},{"introduced":"1.10.3"},{"last_affected":"1.10.3"},{"introduced":"1.10.4"},{"last_affected":"1.10.4"},{"introduced":"1.11.0"},{"last_affected":"1.11.0"},{"introduced":"1.11.0-rc1"},{"last_affected":"1.11.0-rc1"},{"introduced":"1.11.0-rc2"},{"last_affected":"1.11.0-rc2"},{"introduced":"1.11.0-rc3"},{"last_affected":"1.11.0-rc3"},{"introduced":"1.11.1"},{"last_affected":"1.11.1"},{"introduced":"1.11.2"},{"last_affected":"1.11.2"},{"introduced":"1.11.3"},{"last_affected":"1.11.3"},{"introduced":"1.11.4"},{"last_affected":"1.11.4"},{"introduced":"1.12.0"},{"last_affected":"1.12.0"},{"introduced":"1.12.0-rc1"},{"last_affected":"1.12.0-rc1"},{"introduced":"1.12.0-rc2"},{"last_affected":"1.12.0-rc2"},{"introduced":"1.12.0-rc3"},{"last_affected":"1.12.0-rc3"},{"introduced":"1.12.1"},{"last_affected":"1.12.1"},{"introduced":"1.12.2"},{"last_affected":"1.12.2"},{"introduced":"1.12.3"},{"last_affected":"1.12.3"},{"introduced":"1.12.4"},{"last_affected":"1.12.4"},{"introduced":"1.13.0"},{"last_affected":"1.13.0"},{"introduced":"1.13.0-rc1"},{"last_affected":"1.13.0-rc1"},{"introduced":"1.13.0-rc2"},{"last_affected":"1.13.0-rc2"},{"introduced":"1.13.1"},{"last_affected":"1.13.1"},{"introduced":"1.13.2"},{"last_affected":"1.13.2"},{"introduced":"1.13.3"},{"last_affected":"1.13.3"},{"introduced":"1.13.4"},{"last_affected":"1.13.4"},{"introduced":"1.14.0"},{"last_affected":"1.14.0"},{"introduced":"1.14.0-rc1"},{"last_affected":"1.14.0-rc1"},{"introduced":"1.14.0-rc2"},{"last_affected":"1.14.0-rc2"},{"introduced":"1.14.0-rc3"},{"last_affected":"1.14.0-rc3"},{"introduced":"1.14.1"},{"last_affected":"1.14.1"},{"introduced":"1.14.2"},{"last_affected":"1.14.2"},{"introduced":"1.14.3"},{"last_affected":"1.14.3"},{"introduced":"1.15.0"},{"last_affected":"1.15.0"},{"introduced":"1.15.0-rc1"},{"last_affected":"1.15.0-rc1"},{"introduced":"1.15.0-rc2"},{"last_affected":"1.15.0-rc2"}]}}],"versions":["1.10.0","1.10.0-rc1","1.10.0-rc2","1.10.0-rc3","1.10.1","1.10.2","1.10.3","1.10.4","1.11.0","1.11.0-rc1","1.11.0-rc2","1.11.0-rc3","1.11.1","1.11.2","1.11.3","1.11.4","1.12.0","1.12.0-rc1","1.12.0-rc2","1.12.0-rc3","1.12.1","1.12.2","1.12.3","1.12.4","1.13.0","1.13.0-rc1","1.13.0-rc2","1.13.1","1.13.2","1.13.3","1.13.4","1.14.0","1.14.0-rc1","1.14.0-rc2","1.14.0-rc3","1.14.1","1.14.2","1.14.3","1.15.0","1.15.0-rc1","1.15.0-rc2","1.5.0","1.5.0-rc1","1.5.0-rc2","1.5.1","1.6.0","1.6.0-rc1","1.6.0-rc2","1.6.3","1.7.0","1.7.0-rc1","1.7.0-rc2","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.8.0","1.8.0-rc1","1.8.0-rc2","1.8.0-rc3","1.8.1","1.8.2","1.8.3","1.8.4","1.9.0","1.9.0-rc1","1.9.0-rc2","1.9.0-rc3","1.9.1","1.9.2","1.9.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7505.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/theforeman/smart-proxy","events":[{"introduced":"51bf654536f7464a69349fd27d6ecc7bfffb1923"},{"last_affected":"cad31e2c43b14b95907db9cc72ee83d23f32c4ac"}],"database_specific":{"cpe":["cpe:2.3:a:theforeman:foreman:1.5.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.5.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.6.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.7.5:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.9.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.10.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.11.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.12.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.13.4:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:rc2:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.0:rc3:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.1:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.2:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.14.3:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.15.0:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.15.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.15.0:rc2:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.5.0"},{"last_affected":"1.5.0"},{"introduced":"1.5.0-rc1"},{"last_affected":"1.5.0-rc1"},{"introduced":"1.5.0-rc2"},{"last_affected":"1.5.0-rc2"},{"introduced":"1.5.1"},{"last_affected":"1.5.1"},{"introduced":"1.5.2"},{"last_affected":"1.5.2"},{"introduced":"1.6.0"},{"last_affected":"1.6.0"},{"introduced":"1.6.0-rc1"},{"last_affected":"1.6.0-rc1"},{"introduced":"1.6.0-rc2"},{"last_affected":"1.6.0-rc2"},{"introduced":"1.6.1"},{"last_affected":"1.6.1"},{"introduced":"1.6.3"},{"last_affected":"1.6.3"},{"introduced":"1.7.0"},{"last_affected":"1.7.0"},{"introduced":"1.7.0-rc1"},{"last_affected":"1.7.0-rc1"},{"introduced":"1.7.0-rc2"},{"last_affected":"1.7.0-rc2"},{"introduced":"1.7.1"},{"last_affected":"1.7.1"},{"introduced":"1.7.2"},{"last_affected":"1.7.2"},{"introduced":"1.7.3"},{"last_affected":"1.7.3"},{"introduced":"1.7.4"},{"last_affected":"1.7.4"},{"introduced":"1.7.5"},{"last_affected":"1.7.5"},{"introduced":"1.8.0"},{"last_affected":"1.8.0"},{"introduced":"1.8.0-rc1"},{"last_affected":"1.8.0-rc1"},{"introduced":"1.8.0-rc2"},{"last_affected":"1.8.0-rc2"},{"introduced":"1.8.0-rc3"},{"last_affected":"1.8.0-rc3"},{"introduced":"1.8.1"},{"last_affected":"1.8.1"},{"introduced":"1.8.2"},{"last_affected":"1.8.2"},{"introduced":"1.8.3"},{"last_affected":"1.8.3"},{"introduced":"1.8.4"},{"last_affected":"1.8.4"},{"introduced":"1.9.0"},{"last_affected":"1.9.0"},{"introduced":"1.9.0-rc1"},{"last_affected":"1.9.0-rc1"},{"introduced":"1.9.0-rc2"},{"last_affected":"1.9.0-rc2"},{"introduced":"1.9.0-rc3"},{"last_affected":"1.9.0-rc3"},{"introduced":"1.9.1"},{"last_affected":"1.9.1"},{"introduced":"1.9.2"},{"last_affected":"1.9.2"},{"introduced":"1.9.3"},{"last_affected":"1.9.3"},{"introduced":"1.10.0"},{"last_affected":"1.10.0"},{"introduced":"1.10.0-rc1"},{"last_affected":"1.10.0-rc1"},{"introduced":"1.10.0-rc2"},{"last_affected":"1.10.0-rc2"},{"introduced":"1.10.0-rc3"},{"last_affected":"1.10.0-rc3"},{"introduced":"1.10.1"},{"last_affected":"1.10.1"},{"introduced":"1.10.2"},{"last_affected":"1.10.2"},{"introduced":"1.10.3"},{"last_affected":"1.10.3"},{"introduced":"1.10.4"},{"last_affected":"1.10.4"},{"introduced":"1.11.0"},{"last_affected":"1.11.0"},{"introduced":"1.11.0-rc1"},{"last_affected":"1.11.0-rc1"},{"introduced":"1.11.0-rc2"},{"last_affected":"1.11.0-rc2"},{"introduced":"1.11.0-rc3"},{"last_affected":"1.11.0-rc3"},{"introduced":"1.11.1"},{"last_affected":"1.11.1"},{"introduced":"1.11.2"},{"last_affected":"1.11.2"},{"introduced":"1.11.3"},{"last_affected":"1.11.3"},{"introduced":"1.11.4"},{"last_affected":"1.11.4"},{"introduced":"1.12.0"},{"last_affected":"1.12.0"},{"introduced":"1.12.0-rc1"},{"last_affected":"1.12.0-rc1"},{"introduced":"1.12.0-rc2"},{"last_affected":"1.12.0-rc2"},{"introduced":"1.12.0-rc3"},{"last_affected":"1.12.0-rc3"},{"introduced":"1.12.1"},{"last_affected":"1.12.1"},{"introduced":"1.12.2"},{"last_affected":"1.12.2"},{"introduced":"1.12.3"},{"last_affected":"1.12.3"},{"introduced":"1.12.4"},{"last_affected":"1.12.4"},{"introduced":"1.13.0"},{"last_affected":"1.13.0"},{"introduced":"1.13.0-rc1"},{"last_affected":"1.13.0-rc1"},{"introduced":"1.13.0-rc2"},{"last_affected":"1.13.0-rc2"},{"introduced":"1.13.1"},{"last_affected":"1.13.1"},{"introduced":"1.13.2"},{"last_affected":"1.13.2"},{"introduced":"1.13.3"},{"last_affected":"1.13.3"},{"introduced":"1.13.4"},{"last_affected":"1.13.4"},{"introduced":"1.14.0"},{"last_affected":"1.14.0"},{"introduced":"1.14.0-rc1"},{"last_affected":"1.14.0-rc1"},{"introduced":"1.14.0-rc2"},{"last_affected":"1.14.0-rc2"},{"introduced":"1.14.0-rc3"},{"last_affected":"1.14.0-rc3"},{"introduced":"1.14.1"},{"last_affected":"1.14.1"},{"introduced":"1.14.2"},{"last_affected":"1.14.2"},{"introduced":"1.14.3"},{"last_affected":"1.14.3"},{"introduced":"1.15.0"},{"last_affected":"1.15.0"},{"introduced":"1.15.0-rc1"},{"last_affected":"1.15.0-rc1"},{"introduced":"1.15.0-rc2"},{"last_affected":"1.15.0-rc2"}],"source":"CPE_STRING"}}],"versions":["1.10.0","1.10.0-rc1","1.10.0-rc2","1.10.0-rc3","1.10.1","1.10.2","1.10.3","1.10.4","1.11.0","1.11.0-rc1","1.11.0-rc2","1.11.0-rc3","1.11.1","1.11.2","1.11.3","1.11.4","1.12.0","1.12.0-rc1","1.12.0-rc2","1.12.0-rc3","1.12.1","1.12.2","1.12.3","1.12.4","1.13.0","1.13.0-rc1","1.13.0-rc2","1.13.1","1.13.2","1.13.3","1.13.4","1.14.0","1.14.0-rc1","1.14.0-rc2","1.14.0-rc3","1.14.1","1.14.2","1.14.3","1.15.0","1.15.0-rc1","1.15.0-rc2","1.5.0","1.5.0-rc1","1.5.0-rc2","1.5.1","1.5.2","1.6.0","1.6.0-rc1","1.6.0-rc2","1.6.1","1.6.3","1.7.0","1.7.0-rc1","1.7.0-rc2","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.8.0","1.8.0-rc1","1.8.0-rc2","1.8.0-rc3","1.8.1","1.8.2","1.8.3","1.8.4","1.9.0","1.9.0-rc1","1.9.0-rc2","1.9.0-rc3","1.9.1","1.9.2","1.9.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7505.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}