Red Hat Security Advisory

RHSA-2013:1522

Foreman security update

Released 2013-11-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 3.0 ruby193-foreman-1.1.10014-1.3.el6ost, ruby193-foreman-mysql-1.1.10014-1.3.el6ost

Fixes 1 record

TI-2013-03843 CVE-2013-4386 · GHSA-28hw-8f4m-6fxw

Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman…

LOW 35

Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01243 Published 2013-11-19 Fixed CWE-89