Lucene search

K
osvGoogleOSV:GHSA-F2RP-4RV7-FC95
HistoryJun 10, 2021 - 3:54 p.m.

Exposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmox

2021-06-1015:54:43
Google
osv.dev
16
foreman project
proxmox
api exposure
authenticated local attacker
data confidentiality
data integrity
system availability
vulnerability
version 0.13.1

EPSS

0

Percentile

5.1%

A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Versions of foreman_fog_proxmox prior to 0.13.1 are affected.

EPSS

0

Percentile

5.1%

Related for OSV:GHSA-F2RP-4RV7-FC95