OpenStack Foreman/foreman

Red Hat · Package

15 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
safemode gem allows context-dependent attackers to obtain sensitive information via the inspect methodCVE-2016-3693 · GHSA-C92M-RRRC-Q5WF	OpenStack Foreman/foreman Red Hat Ceph Storage 1.3/foreman	Red HatRubyGems	High	Fix reported	2024-02-18
foreman: cross-site scripting (XSS) flaw in template preview screenCVE-2014-3653	OpenStack Foreman/foreman Red Hat OpenStack Platform 4/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: lack of SSL certificate validation when performing LDAPS authenticationCVE-2015-1816	OpenStack Foreman/foreman Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: API not scoping resources to taxonomiesCVE-2015-1844	OpenStack Foreman/foreman Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: the _session_id cookie is issued without the Secure flagCVE-2015-3155	OpenStack Foreman/foreman Red Hat OpenStack Platform 4/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: edit_users permission allows changing of admin passwordsCVE-2015-3235	OpenStack Foreman/foreman	Red Hat	High	No fix reported	Not recorded
Foreman: API permits HTTP requests when require_ssl is enabledCVE-2015-5152	OpenStack Foreman/foreman Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: reports show/destroy not restricted by host authorizationCVE-2015-5233	OpenStack Foreman/foreman Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: XSS in hidden parameter value switcherCVE-2015-5282	OpenStack Foreman/foreman Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: Stored XSS vulnerability in smart class parameters/variablesCVE-2015-7518	OpenStack Foreman/foreman Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: privilege escalation through Organization and Locations APICVE-2016-4451	OpenStack Foreman/foreman Red Hat Ceph Storage 1.3/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: API and UI actions/URLs not limited to the orgs/locations assignedCVE-2016-4475	OpenStack Foreman/foreman Red Hat Ceph Storage 1.3/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: Information disclosure in provisioning template previewsCVE-2016-4995	OpenStack Foreman/foreman Red Hat Ceph Storage 1.3/foreman	Red Hat	Low	No fix reported	Not recorded
foreman: Foreman information leak through unauthorized multiple_checkboxes helperCVE-2016-7077	OpenStack Foreman/foreman Red Hat Ceph Storage 1.3/foreman	Red Hat	Low	No fix reported	Not recorded
foreman: Information leak through organizations and locations featureCVE-2016-7078	OpenStack Foreman/foreman Red Hat Ceph Storage 1.3/foreman	Red Hat	Low	No fix reported	Not recorded