CVE-2013-0210: Improper Control of Generation of Code

The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands...

PT-2014-2436

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.2.0 Description The issue allows remote attackers to execute arbitrary commands. This is related to escaping and Puppet commands in the smart proxy Puppet run API. Recommendations For versions prior to 1.2.0, update...