1002 matches found
CVE-2024-8553
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
CVE-2024-8553 Foreman: read-only access to entire db from templates
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
CVE-2024-8553 Foreman: read-only access to entire db from templates
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
CVE-2024-8553
CVE-2024-8553 affects Foreman/Satellite via loader macros in templates, enabling read access to the entire Foreman DB for authenticated users with template permissions. The issue is acknowledged in Red Hat advisories (RHSA-2024:8717/8718/8906) as an authentication bypass enabling read-only DB acc...
CVE-2024-8553
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
Foreman 信息泄露漏洞
Foreman is Foreman's open source set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and reporting status. Foreman has an information disclosure vulnerability that stems from a vulnerability...
CVE-2024-6861
A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API. Mitigation To mitigate this...
Foreman 信息泄露漏洞
Foreman is Foreman's open source set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. An information disclosure vulnerability exists in versions prior to Foreman 3.3, whi...
RHSA-2015:0830 Red Hat Security Advisory: openstack-foreman-installer security update
Bulletin has no description...
RHSA-2015:0287 Red Hat Security Advisory: foreman-proxy security update
Bulletin has no description...
RHSA-2015:0288 Red Hat Security Advisory: foreman-proxy security update
Bulletin has no description...
RHSA-2014:0770 Red Hat Security Advisory: foreman-proxy security update
Bulletin has no description...
RHSA-2013:1522 Red Hat Security Advisory: Foreman security update
Bulletin has no description...
RHSA-2013:1196 Red Hat Security Advisory: Foreman security update
Bulletin has no description...
RHSA-2013:0995 Red Hat Security Advisory: Foreman security and bug fix update
Bulletin has no description...
puppet-foreman: An authentication bypass vulnerability exists in Foreman
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's modproxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing...
puppet-foreman: An authentication bypass vulnerability exists in Foreman
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's modproxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing...
puppet-foreman: An authentication bypass vulnerability exists in Foreman
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's modproxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing...
CVE-2024-7012
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's modproxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing...
CVE-2024-7012 Puppet-foreman: an authentication bypass vulnerability exists in foreman
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's modproxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing...