Red Hat Security Advisory

RHSA-2013:0995

Foreman security and bug fix update

Released 2013-06-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 3.0 ruby193-foreman-1.1.10009-3.el6ost, ruby193-foreman-mysql-1.1.10009-3.el6ost, ruby193-foreman-proxy-1.1.10001-4.el6ost +8

Fixes 2 records

TI-2013-01890 CVE-2013-2121 · GHSA-j6g9-xm4c-vp6v

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman…

MEDIUM 48

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.24782 Published 2013-07-31 Fixed CWE-94

TI-2013-01882 CVE-2013-2113 · GHSA-5f23-fjp4-22q7

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2…

MEDIUM 46

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.20934 Published 2013-07-31 Fixed CWE-264