CVE-2016-4995

Foreman is affected in versions prior to 1.11.4 and 1.12.x prior to 1.12.1. The issue is an information-disclosure vulnerability where remote authenticated users with permission to view some hosts can access sensitive host configuration data through a URL referencing a hostname, due to improper r...

CVE-2016-6319

CVE-2016-6319 is a cross-site scripting (XSS) vulnerability in Foreman before 1.12.2, exploitable via the label parameter in app/helpers/form_helper.rb used by Remote Execution (and possibly other plugins). The issue enables remote attackers to inject arbitrary web script or HTML, with impact des...

CVE-2016-6320

CVE-2016-6320 describes a Cross-Site Scripting (XSS) vulnerability in Foreman’s web UI, specifically in the file app/assets/javascripts/host_edit_interfaces.js. The issue allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the ho...

CVE-2016-4451

The CVE-2016-4451 issue affects Foreman: Organization and Locations APIs allow remote authenticated users to bypass organization and location restrictions by using knowledge of an arbitrary organization id, enabling read/modify of data for that org. Affected versions: Foreman before 1.11.3 and Fo...

CVE-2016-5390

Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the viewhosts permission containing a filter to obtain sensitive network interface information via a request to API routes beneath "hosts," as demonstrated by a GET request to api/v2/hosts/secrethost/interfaces...

CVE-2016-5390

CVE-2016-5390 affects Foreman before 1.11.4 and 1.12.x before 1.12.1. The issue allows remote authenticated users with the view_hosts permission to exploit an information-disclosure flaw via API routes under hosts (e.g., api/v2/hosts/secrethost/interfaces) to obtain sensitive network interface in...

CVE-2016-4995

Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information via a URL with a hostname...

CVE-2016-6319

Cross-site scripting XSS vulnerability in app/helpers/formhelper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter...

CVE-2016-4475

The CVE-2016-4475 issue affects Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3. It allows remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) delete arbitrary organizations or locations via unspecified vectors. Impact is data exposure and...

CVE-2016-4475

The 1 Organization and 2 Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and a read, b edit, or c delete arbitrary organizations or locations via unspecified vectors...

CVE-2016-6320

Cross-site scripting XSS vulnerability in app/assets/javascripts/hosteditinterfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...

CVE-2016-6320: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in app/assets/javascripts/hosteditinterfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...

PT-2016-6825 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.12.2 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the label parameter. This is related to the app/helpers/form helper.rb file in Foreman, which is use...

PT-2016-6826 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.12.2 Description: A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form. This is...

CVE-2016-4995: Exposure of Sensitive Information to an Unauthorized Actor

Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information via a URL with a hostname...

CVE-2016-4475: Undefined Security Weakness

The 1 Organization and 2 Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and a read, b edit, or c delete arbitrary organizations or locations via unspecified vectors...

CVE-2016-5390: Exposure of Sensitive Information to an Unauthorized Actor

Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the viewhosts permission containing a filter to obtain sensitive network interface information via a request to API routes beneath "hosts," as demonstrated by a GET request to api/v2/hosts/secrethost/interfaces...

PT-2016-5968 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.11.4 Foreman versions 1.12.x prior to 1.12.0-RC3 Description: The issue allows remote authenticated users to bypass organization and location restrictions. This enables users to read, edit, or delete arbitrary...

CVE-2016-6319: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in app/helpers/formhelper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter...

CVE-2016-4451: Undefined Security Weakness

The 1 Organization and 2 Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unlimited filters to bypass organization and location restrictions and read or modify data for an arbitrary organization by leveraging knowledge of the id of that...