{"action":"Upgrade katello to 3.17.0.rc1 or later.","affected":[{"fixed":"3.17.0.rc1","introduced":"0"}],"component":"katello","cve_ids":["CVE-2017-2662"],"ecosystem":"RubyGems","epss":0.00938,"exploited":false,"fixed_versions":["3.17.0.rc1"],"ghsa_id":"GHSA-cpv6-pfq6-j2v7","id":"tcs_01M5KEJTMT2YGXN2C6RV8E9RX5","modified_at":"2023-11-08T03:59:19.608016Z","published_at":"2022-05-13T01:36:51Z","references":["https://osv.dev/vulnerability/GHSA-cpv6-pfq6-j2v7","https://nvd.nist.gov/vuln/detail/CVE-2017-2662","https://github.com/Katello/katello/pull/8772","https://github.com/Katello/katello/commit/853260e3e9f94179d5881199e7885d1c08e600f6","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662","https://github.com/Katello/katello","https://projects.theforeman.org/issues/18838"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-cpv6-pfq6-j2v7","url":"https://osv.dev/vulnerability/GHSA-cpv6-pfq6-j2v7"}],"summary":"katello Improper Privilege Management vulnerability"}