CVE-2015-3235

CVE-2015-3235 describes a vulnerability in Foreman versions prior to 1.9.0, where remote authenticated users with 'edit_users' permission can modify administrator user accounts and change their passwords. This medium-severity vulnerability (CVSS 6.0) has a network attack vector, requires medium attack complexity, and could lead to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.