Authorization Bypass

foreman-tasks is vulnerable to authorization bypass. An unprivileged user is able to view tasks details via the web UI and the API using the UUID of a task. This vulnerability is caused by a lack of authorization checks...

CVE-2019-10198

An authentication bypass vulnerability was discovered in Foreman. Previously, commit tasks were searched through findresource, which performed authorization checks. After the change to Foreman, an unauthenticated user can view the details of a task through the web UI or API, if they can discover ...

GHSA-XM28-FW2X-FQV2 Denial of Service in foreman

All versions of foreman are vulnerable to Regular Expression Denial of Service when requests to it are made with a specially crafted path. Recommendation Upgrade to version 3.0.1...

Denial of Service in foreman

All versions of foreman are vulnerable to Regular Expression Denial of Service when requests to it are made with a specially crafted path. Recommendation Upgrade to version 3.0.1...

Information Disclosure

foreman is vulnerable to information disclosure. Remote authenticated attacker with limited permissions for powering oVirt/RHV hosts on and off could discover the username and password used to connect to the compute resource...

SQL Injection

Foreman is vulnerable to SQL injection. An input sanitization flaw in the id field in the dashboard controller allows remote unauthenticated attackers to perform SQL injection on the back end database...

Cross-Site Scripting (XSS)

foreman is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript in a victim's browser by creating a malicious entity that executes upon the display of the success notification...

Cross-Site Scripting (XSS)

foreman is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript in a victim's browser via the breadcrumbs bar by storing malicious code that executes when viewed by a user...

Cross-site Scripting (XSS)

Foreman is vulnerable to cross-site scripting attacks. Remote unauthenticated attacker could exploit the Facts Submission component by injecting arbitrary html and script code into the web site which would alter the appearance and make it possible to initiate further attacks against site visitors...

Improper Access Control

foreman is vulnerable to improper access control. A remote, authenticated attacker with access to the foreman log file could exploit the flawed Log Handler component to view passwords for provisioned systems in the log file, allowing them to access those systems...

Information Disclosure

Foreman is vulnerable to information disclosure attacks. This occurs in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems...

Cross-Site Scripting (XSS)

Foreman is vulnerable to cross-site scripting XSS attacks. A remote attacker could exploit a flaw in the web interface component. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface...

Cross-Site Scripting (XSS)

Foreman is vulnerable to cross-site scripting attacks. This could allow an attacker with privileges to set the name in a template to display arbitrary HTML including scripting code within the web interface...

Information Disclosure

Red Hat Satellite is vulnerable to information disclosure. This exists in discovery-debug in foreman. Local users with access to the system journal could view the root password associated with that system...

Information Disclosure

Foreman is vulnerable to information disclosure vulnerability. The vulnerability exists in foreman's handling of template previews. Remote authenticated users with permission could view some hosts to obtain sensitive host configuration information via a URL with a hostname...

Security Bypass

Red Hat Satellite is vulnerable to security bypass vulnerability. This is because the foreman in Satellite 6 does not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations...

foreman: stored XSS in success notification after entity creation

A cross-site scripting XSS flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and...

foreman: Persisted XSS on all pages that use breadcrumbs

A cross-site scripting XSS flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and...

RHEL 7 : Satellite 6.5 Release (Moderate) (RHSA-2019:1222)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1222 advisory. Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring...

Foreman < 1.20.3 and 1.21.0 Information Disclosure Vulnerability

Foreman is prone to an authenticated information dislosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...