CVE-2015-3235

Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.

Date published : 2015-08-14

http://projects.theforeman.org/issues/10829

http://theforeman.org/manuals/1.9/index.html#Releasenotesfor1.9