CveMateVulnerability intelligence

Theforeman vulnerabilities, page 2

105 vulnerabilities

Known vulnerabilities in Theforeman products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.

CVE-2013-4386redhatopenstack+312y ago19-11-2013 19:00

Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter.CVE-2021-20259RubyGemsforeman_fog_proxmox+15y ago07-06-2021 20:31

A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Versions before foreman_fog_proxmox 0.13.1 are affected CVE-2021-20290theforemanopenscap4y ago25-03-2022 18:02

An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.CVE-2021-3457theforemansmart_proxy_shell_hooks5y ago12-05-2021 14:23

An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.CVE-2021-3494theforemanforeman5y ago26-04-2021 14:13

A smart proxy that provides a restful API to various sub-systems of the Foreman is affected by the flaw which can cause a Man-in-the-Middle attack. The FreeIPA module of Foreman smart proxy does not check the SSL certificate, thus, an unauthenticated attacker can perform actions in FreeIPA if certain conditions are met. The highest threat from this flaw is to system confidentiality. This flaw affects Foreman versions before 2.5.0.CVE-2021-3584redhatsatellite+14y ago23-12-2021 19:48

A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability of system. Fixed releases are 2.4.1, 2.5.1, 3.0.0.CVE-2021-3456theforemansmart_proxy_salt4y ago30-03-2022 16:01

An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.CVE-2021-3589RubyGemsforeman_ansible+24y ago23-03-2022 19:46

An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.CVE-2021-3469theforemanforeman5y ago03-06-2021 19:43

Foreman versions before 2.3.4 and before 2.4.0 is affected by an improper authorization handling flaw. An authenticated attacker can impersonate the foreman-proxy if product enable the Puppet Certificate authority (CA) to sign certificate requests that have subject alternative names (SANs). Foreman do not enable SANs by default and `allow-authorization-extensions` is set to `false` unless user change `/etc/puppetlabs/puppetserver/conf.d/ca.conf` configuration explicitly.CVE-2021-3590redhatsatellite+14y ago22-08-2022 14:48

A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.CVE-2021-3413redhatsatellite+15y ago08-04-2021 22:06

A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.CVE-2015-1844theforemanforeman11y ago14-08-2015 18:00

Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API.CVE-2015-1816theforemanforeman11y ago14-08-2015 18:00

Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-middle attackers to spoof LDAP servers via a crafted certificate.CVE-2015-7518redhatcandlepin+4010y ago17-12-2015 19:00

Multiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via (1) global parameters, (2) smart class parameters, or (3) smart variables in the (a) host or (b) hostgroup edit forms.CVE-2015-5246theforemanforeman9y ago06-10-2017 15:00

The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors involving the password lifetime period in Active Directory.CVE-2015-5152theforemanforeman9y ago14-07-2017 20:00

Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack.CVE-2015-5233redhatsatellite+4110y ago11-04-2016 21:00

Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the destroy_reports permission to delete reports from arbitrary hosts via direct access to the (a) individual report show/delete pages or (b) APIs.CVE-2015-5282theforemanforeman9y ago25-09-2017 17:00

Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after.CVE-2015-3235theforemanforeman11y ago14-08-2015 18:00

Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.CVE-2015-3155theforemanforeman11y ago14-08-2015 18:00

Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.