Vulnerability in Theforeman Foreman

CVE-2013-0187

Foreman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or (2) AJAX request.

EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.

Affected products

Theforeman Foreman
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)