1190 matches found
foreman: Read-only access to entire DB from templates
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
Moderate: Red Hat Security Advisory: Satellite 6.13.7.3 Async Update
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat Satellite is a system...
CVE-2024-8553
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
CVE-2024-8553 Foreman: read-only access to entire db from templates
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
CVE-2024-8553 Foreman: read-only access to entire db from templates
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
CVE-2024-8553
CVE-2024-8553 affects Foreman/Satellite via loader macros in templates, enabling read access to the entire Foreman DB for authenticated users with template permissions. The issue is acknowledged in Red Hat advisories (RHSA-2024:8717/8718/8906) as an authentication bypass enabling read-only DB acc...
CVE-2024-8553
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
Foreman 信息泄露漏洞
Foreman is Foreman's open source set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and reporting status. Foreman has an information disclosure vulnerability that stems from a vulnerability...
CVE-2024-8553: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
CVE-2024-6861
A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API. Mitigation To mitigate this...
Foreman 信息泄露漏洞
Foreman is Foreman's open source set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. An information disclosure vulnerability exists in versions prior to Foreman 3.3, whi...
RHSA-2015:0830 Red Hat Security Advisory: openstack-foreman-installer security update
Bulletin has no description...
RHSA-2015:0287 Red Hat Security Advisory: foreman-proxy security update
Bulletin has no description...
RHSA-2015:0288 Red Hat Security Advisory: foreman-proxy security update
Bulletin has no description...
RHSA-2014:0770 Red Hat Security Advisory: foreman-proxy security update
Bulletin has no description...
RHSA-2013:1522 Red Hat Security Advisory: Foreman security update
Bulletin has no description...
RHSA-2013:1196 Red Hat Security Advisory: Foreman security update
Bulletin has no description...
RHSA-2013:0995 Red Hat Security Advisory: Foreman security and bug fix update
Bulletin has no description...
puppet-foreman: An authentication bypass vulnerability exists in Foreman
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's modproxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing...
puppet-foreman: An authentication bypass vulnerability exists in Foreman
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's modproxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing...