CVE-2013-0173: Undefined Security Weakness

Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack...

CVE-2014-0135: Undefined Security Weakness

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for defaultvalues.yaml, which allows local users to obtain passwords and other sensitive information by reading the file...

CVE-2012-5477: Undefined Security Weakness

The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the daemon via unspecified vectors...

CVE-2013-0210: Improper Control of Generation of Code

The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands...

CVE-2014-0090: Improper Authentication

Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie...

CVE-2013-0171: Improper Control of Generation of Code

Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the 1 fact or 2 report import API...

PT-2014-2436

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.2.0 Description The issue allows remote attackers to execute arbitrary commands. This is related to escaping and Puppet commands in the smart proxy Puppet run API. Recommendations For versions prior to 1.2.0, update...

PT-2014-2430

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1 Description The issue allows remote authenticated users to gain privileges. This can be achieved via a XMLHttpRequest or an AJAX request, such as '/api/v1/requests'. The username and password variables may be...

PT-2014-2426

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1 Description The issue allows remote attackers to execute arbitrary code by sending a crafted YAML object to specific API endpoints, including the fact or report import API. Recommendations For versions prior to 1....

PT-2014-2428

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1 Description The issue allows remote attackers to obtain the hashed root password via an API request to the external node classifier ENC API. Recommendations For versions prior to 1.1, update to version 1.1 or late...

PT-2014-2427

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1 Description The issue makes it easier for attackers to guess the root password via a brute force attack because a static salt of "foreman" is used to hash root passwords. Recommendations For versions prior to 1.1,...

CVE-2013-0174: Exposure of Sensitive Information to an Unauthorized Actor

The external node classifier ENC API in Foreman before 1.1 allows remote attackers to obtain the hashed root password via an API request...

PT-2014-2311

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1 Description The issue concerns the smart proxy in Foreman, where a umask set to 0 allows local users to modify files created by the daemon. Recommendations For versions prior to 1.1, update to version 1.1 or later...

CVE-2014-0192: Undefined Security Weakness

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."...

CVE-2012-5648

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 app/models/hostext/search.rb or 2 app/models/puppetclass.rb, related to the search mechanism...

Sql injection

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 app/models/hostext/search.rb or 2 app/models/puppetclass.rb, related to the search mechanism...

CVE-2012-5648

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 app/models/hostext/search.rb or 2 app/models/puppetclass.rb, related to the search mechanism...

CVE-2012-5648

Foreman

CVE-2012-5648

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 app/models/hostext/search.rb or 2 app/models/puppetclass.rb, related to the search mechanism...

CVE-2012-5648: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 app/models/hostext/search.rb or 2 app/models/puppetclass.rb, related to the search mechanism...