CveMateVulnerability intelligence

Theforeman vulnerabilities, page 4

105 vulnerabilities

Known vulnerabilities in Theforeman products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.

CVE-2014-0192theforemanforeman12y ago08-05-2014 14:00

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."CVE-2014-0241redhatsatellite+26y ago13-12-2019 12:58

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable CVE-2014-0007redhatforeman-proxy+212y ago20-06-2014 14:00

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.CVE-2014-0089theforemanforeman12y ago27-03-2014 16:00

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.CVE-2014-0090theforemanforeman12y ago08-05-2014 14:00

Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie.CVE-2014-0208theforemanforeman9y ago16-10-2017 18:00

Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted key name.CVE-2014-4507theforemanforeman12y ago20-06-2014 14:00

Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the dst parameter to tftp/fetch_boot_file.CVE-2014-8183redhatsatellite+17y ago01-08-2019 13:38

It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.CVE-2014-3691redhatopenstack+3511y ago09-03-2015 14:00

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.CVE-2014-3492theforemanforeman12y ago01-07-2014 16:00

Multiple cross-site scripting (XSS) vulnerabilities in the host YAML view in Foreman before 1.4.5 and 1.5.x before 1.5.1 allow remote attackers to inject arbitrary web script or HTML via a parameter (1) name or (2) value related to the host.CVE-2014-3491theforemanforeman12y ago01-07-2014 16:00

Cross-site scripting (XSS) vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes.CVE-2014-3531theforemanforeman9y ago18-10-2017 14:00

Multiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote authenticated users to inject arbitrary web script or HTML via the operating system (1) name or (2) description.CVE-2014-3653theforemanforeman11y ago06-07-2015 14:55

Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.CVE-2022-3874RubyGemsforeman+23y ago22-09-2023 13:56

A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.CVE-2012-5477theforemanforeman12y ago08-05-2014 14:00

The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the daemon via unspecified vectors.CVE-2012-5648theforemanforeman12y ago04-04-2014 14:00

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) app/models/hostext/search.rb or (2) app/models/puppetclass.rb, related to the search mechanism.CVE-2012-3503RubyGemskatello+214y ago25-08-2012 10:00

The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary user by creating a cookie using the default secret_token.CVE-2017-2672redhatsatellite+28y ago21-06-2018 13:00

A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.CVE-2017-2667foremanhammer cli+48y ago12-03-2018 15:00

Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.CVE-2017-2662RubyGemskatello+28y ago22-08-2018 16:00

A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.