Theforeman vulnerabilities
105 vulnerabilities
Known vulnerabilities in Theforeman products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.
Products
11- Foreman84 vulnerabilities
- Katello10 vulnerabilities
- Foreman Ansible2 vulnerabilities
- Hammer Cli2 vulnerabilities
- Foreman Azurerm1 vulnerabilities
- Foreman Tasks1 vulnerabilities
- Foremanfogproxmox1 vulnerabilities
- Kafo1 vulnerabilities
- Openscap1 vulnerabilities
- Smart Proxy Salt1 vulnerabilities
- Smart Proxy Shell Hooks1 vulnerabilities
CVE-2018-16887RubyGemskatello+3
EPSS score1.00%
A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Versions before 3.9.0 are vulnerable.CVE-2018-16861the foreman projectforeman+1EPSS score0.88%
A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable.CVE-2018-1097foreman projectforeman+2EPSS score1.74%
A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and password used to connect to the compute resource.CVE-2018-1096foreman projectforeman+2EPSS score1.33%
An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.CVE-2018-14643RubyGemssmart_proxy_dynflow+3EPSS score6.06%
An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remotely execute arbitrary commands on machines managed by vulnerable Foreman instances, in a highly privileged context.CVE-2018-14664theforemanforeman+1EPSS score1.07%
A flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability exists due to an improperly escaped HTML code in the breadcrumbs bar. This allows a user with permissions to edit which attribute is used in the breadcrumbs bar to store code that will be executed on the client side.CVE-2018-14623RubyGemskatello+2EPSS score1.43%
A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is vulnerable.CVE-2013-2143redhatnetwork_satellite+1EPSS score48.22%
The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by setting a user account to an administrator account.CVE-2013-2121redhatopenstack+1EPSS score24.78%
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.CVE-2013-2101katellokatello+2EPSS score0.55%
Katello has multiple XSS issues in various entitiesCVE-2013-2113redhatopenstack+1EPSS score20.93%
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.CVE-2013-0187theforemanforemanEPSS score1.08%
Foreman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or (2) AJAX request.CVE-2013-0283katellokatello+1EPSS score0.55%
Katello: Username in Notification page has cross site scriptingCVE-2013-0174theforemanforemanEPSS score1.67%
The external node classifier (ENC) API in Foreman before 1.1 allows remote attackers to obtain the hashed root password via an API request.CVE-2013-0173theforemanforemanEPSS score1.12%
Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack.CVE-2013-0171theforemanforemanEPSS score2.97%
Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the (1) fact or (2) report import API.CVE-2013-0210theforemanforemanEPSS score1.85%
The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands.CVE-2013-4120katellokatello+1EPSS score1.30%
Katello has a Denial of Service vulnerability in API OAuth authenticationCVE-2013-4180redhatopenstack+1EPSS score2.41%
The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service (memory consumption) via unspecified input that is converted to a symbol.CVE-2013-4182redhatopenstack+1EPSS score2.40%
app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.