994 matches found
CVE-2016-6319
Cross-site scripting XSS vulnerability in app/helpers/formhelper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter...
CVE-2016-6320
CVE-2016-6320 describes a Cross-Site Scripting (XSS) vulnerability in Foreman’s web UI, specifically in the file app/assets/javascripts/host_edit_interfaces.js. The issue allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the ho...
CVE-2016-5390
CVE-2016-5390 affects Foreman before 1.11.4 and 1.12.x before 1.12.1. The issue allows remote authenticated users with the view_hosts permission to exploit an information-disclosure flaw via API routes under hosts (e.g., api/v2/hosts/secrethost/interfaces) to obtain sensitive network interface in...
CVE-2016-6319
CVE-2016-6319 is a cross-site scripting (XSS) vulnerability in Foreman before 1.12.2, exploitable via the label parameter in app/helpers/form_helper.rb used by Remote Execution (and possibly other plugins). The issue enables remote attackers to inject arbitrary web script or HTML, with impact des...
CVE-2016-4475
The 1 Organization and 2 Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and a read, b edit, or c delete arbitrary organizations or locations via unspecified vectors...
CVE-2016-6320
Cross-site scripting XSS vulnerability in app/assets/javascripts/hosteditinterfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...
CVE-2016-4995
Foreman is affected in versions prior to 1.11.4 and 1.12.x prior to 1.12.1. The issue is an information-disclosure vulnerability where remote authenticated users with permission to view some hosts can access sensitive host configuration data through a URL referencing a hostname, due to improper r...
CVE-2016-5390
Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the viewhosts permission containing a filter to obtain sensitive network interface information via a request to API routes beneath "hosts," as demonstrated by a GET request to api/v2/hosts/secrethost/interfaces...
CVE-2016-4475
The CVE-2016-4475 issue affects Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3. It allows remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) delete arbitrary organizations or locations via unspecified vectors. Impact is data exposure and...
CVE-2016-4451
The CVE-2016-4451 issue affects Foreman: Organization and Locations APIs allow remote authenticated users to bypass organization and location restrictions by using knowledge of an arbitrary organization id, enabling read/modify of data for that org. Affected versions: Foreman before 1.11.3 and Fo...
PT-2016-6826 · Foreman · Foreman
Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.12.2 Description: A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form. This is...
PT-2016-5968 · Foreman · Foreman
Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.11.4 Foreman versions 1.12.x prior to 1.12.0-RC3 Description: The issue allows remote authenticated users to bypass organization and location restrictions. This enables users to read, edit, or delete arbitrary...
PT-2016-6825 · Foreman · Foreman
Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.12.2 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the label parameter. This is related to the app/helpers/form helper.rb file in Foreman, which is use...
foreman: API and UI actions/URLs not limited to the orgs/locations assigned
It was found that the foreman API and UI actions and URLs are not properly limited to the organizations and locations they were assigned to. This could allow an attacker to view and update other organizations and locations in the system that they should not be allowed to...
Foreman HTML Injection Vulnerability
Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. An HTML injection vulnerability exists in Foreman, which arises from the program's failure to adequately...
CVE-2016-6319
It was found that foreman is vulnerable to a stored XSS via a job template with a malformed name. This could allow an attacker with privileges to set the name in a template to display arbitrary HTML including scripting code within the web interface...
Foreman Remote Privilege Vulnerability
Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A remote privilege extraction vulnerability exists in Foreman versions prior to 1.11.4. A remote attacke...
foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter
It was found that the “variant” parameter in the TFTP API of Foreman was passed to the eval function. An attacker could possibly use this flaw to execute arbitrary code with the privileges of the Foreman user...
Foreman: API permits HTTP requests when require_ssl is enabled
Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the requiressl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack...