CVE-2017-7505

CVE-2017-7505 describes an incorrect authorization vulnerability in Foreman versions 1.5 and later. This flaw allows authenticated users with user management permissions, even if scoped to specific organizations, to perform all user management operations, including password changes, on administrator accounts outside their assigned scope. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its low attack complexity and potential for complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.