PT-2026-94248

A flaw was found in the foreman remote execution plugin's template invocations controller. The show template invocation by host action resolves the job invocation by ID without evaluating the caller's view job invocations permission filter against the record. An authenticated user whose job...

EUVD-2020-3145

Malware in sbrugna...

The vulnerability of the Job Invocation component in the tfm-rubygem-foreman_ansible package allows a attacker to disclose confidential information.

The vulnerability of the Job Invocation component in the tfm-rubygem-foremanansible package is related to incorrect authentication. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose confidential information...

ROS-20250806-05

A vulnerability in the Job Invocation component of tfm-rubygem-foremanansible is related to data manipulation. Exploitation of the vulnerability could allow an attacker acting remotely to view the job invocation, searching for passwords and other sensitive data...

Information Exposure

Overview foremanansible is an Ansible integration with Foreman. Affected versions of this package are vulnerable to Information Exposure. A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious...

CVE-2020-10716

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects...

CVE-2020-10716

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects...

Design/Logic Flaw

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects...

CVE-2020-10716

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects...

CVE-2020-10716

CVE-2020-10716 describes a UI access-control flaw in Red Hat Satellite’s Job Invocation: the "User Input" entry is not properly restricted to the view, allowing a user with access to Job Invocation to scan the invocation and search for passwords or other sensitive data. Affected: tfm-rubygem-fore...

CVE-2020-10716

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects...

CVE-2020-10716: Improper Authorization

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects...

PT-2021-9171

Name of the Vulnerable Software and Affected Versions Red Hat Satellite tfm-rubygem-foreman ansible versions prior to 4.0.3.4 Description A flaw in Red Hat Satellite's Job Invocation allows a malicious user to scan through the invocation, potentially searching for passwords and other sensitive da...

Information Disclosure

Red Hat Satellite's Job Invocation is vulnerable to information disclosure. The User Input entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data...

Red Hat Satellite Job Invocation Authorization Issue Vulnerability

Red Hat Satellite is a system management platform from Red Hat, Inc. that extends the Linux infrastructure and provides system management capabilities such as administration, configuration, and monitoring. Red Hat Satellite is a system management platform from Red Hat, Inc. that extends the Linux...

CVE-2020-10716

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data...

rubygem-foreman_ansible: "User input" entry from Job Invocation may contain sensitive data

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data...