CVE-2014-3590

2020-01-0219:52:06

redhat

www.cve.org

0.001 Low

EPSS

Percentile

45.4%

JSON

Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.

CNA Affected

[
  {
    "product": "Red Hat Satellite 6",
    "vendor": "Red Hat Satellite 6",
    "versions": [
      {
        "status": "affected",
        "version": "6"
      }
    ]
  }
]