Foreman
7 CVEs across 3 Foreman products. Browse Foreman vulnerabilities, severities, and proof-of-concept exploits.
Foreman products with known CVEs
Foreman CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2014-0091 | Medium | 5.3 | 2019-12-11 | Foreman has improper input validation which could lead to partial Denial of Service |
CVE-2016-7078 | Medium | 4.3 | 2018-09-10 | foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/loca… |
CVE-2016-7077 | Medium | 4.3 | 2018-09-10 | foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthoriz… |
CVE-2016-9595 | High | 7.3 | 2018-07-27 | A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to condu… |
CVE-2017-7535 | Medium | 6.1 | 2018-07-26 | foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign… |
CVE-2017-2667 | High | 8.1 | 2018-03-12 | Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a r… |
CVE-2017-7505 | High | 8.8 | 2017-05-26 | Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organiz… |