Most severe vulnerabilities for "theforeman foreman" 1.0

Where

AND

Sort:

theforeman foremanSQL Injection

Risk 52

Severity

7.5

SQL Injection

AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) app/models/hostext/search.rb or (2) app/models/puppetclass.rb, related to the search mechanism.

First published (updated )

CVE-2012-5648

theforeman foremanCode Injection

Risk 52

Severity

7.5

Code Injection

AV:N/AC:L/Au:N/C:P/I:P/A:P

Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the (1) fact or (2) report import API.

First published (updated )

CVE-2013-0171

theforeman foremanCode Injection

Risk 52

Severity

7.5

Code Injection

AV:N/AC:L/Au:N/C:P/I:P/A:P

The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands.

First published (updated )

CVE-2013-0210

theforeman foremanSession fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web session…

Risk 48

Severity

6.8

AV:N/AC:M/Au:N/C:P/I:P/A:P

Jeremy Choi and Keqin Hong of the Red Hat HSS Pen-Test Team reported that under some circumstances foreman did not generate new session-id's for every login. This flaw could allow authentication to be bypassed through session fixation attacks.

1 / 2

Source: Red Hat

First published (updated )

CVE-2014-0090

theforeman foremanForeman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or …

Risk 46

Severity

6.5

AV:N/AC:L/Au:S/C:P/I:P/A:P

Foreman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or (2) AJAX request.

First published (updated )

CVE-2013-0187

theforeman foremanForeman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attack…

Risk 26

Severity

AV:N/AC:L/Au:N/C:N/I:P/A:N

Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack.

First published (updated )

CVE-2013-0173

theforeman foremanInfoleak

Risk 26

Severity

Infoleak

AV:N/AC:L/Au:N/C:P/I:N/A:N

The external node classifier (ENC) API in Foreman before 1.1 allows remote attackers to obtain the hashed root password via an API request.

First published (updated )

CVE-2013-0174

theforeman foremanThe smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify file…

Risk 25

Severity

3.6

AV:L/AC:L/Au:N/C:N/I:P/A:P

The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the daemon via unspecified vectors.

First published (updated )

CVE-2012-5477

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact