PT-2014-2430

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1 Description The issue allows remote authenticated users to gain privileges. This can be achieved via a XMLHttpRequest or an AJAX request, such as '/api/v1/requests'. The username and password variables may be...