Directory traversal

2014-06-2014:55:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.4%

JSON

Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a … (dot dot) in the dst parameter to tftp/fetch_boot_file.

CPENameOperatorVersion
foremaneq1.4.1
foremaneq1.4.3
foremaneq1.4.2
foremaneq1.5.0
foremanle1.4.4
foremaneq1.4.0

Name	Operator	Version
foreman	eq	1.4.1
foreman	eq	1.4.3
foreman	eq	1.4.2
foreman	eq	1.5.0
foreman	le	1.4.4
foreman	eq	1.4.0

References

projects.theforeman.org/issues/6086