Red Hat Security Advisory

RHSA-2014:0770

foreman-proxy security update

Released 2014-06-19 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 3.0 ruby193-foreman-proxy-1.1.10001-7.el6ost
Red Hat Enterprise Linux OpenStack Platform 4.0 foreman-proxy-1.3.0-5.el6sat

Fixes 1 record

TI-2014-00007 CVE-2014-0007 · GHSA-4ffx-rh24-gpxh

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to…

MEDIUM 44

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09017 Published 2014-06-20 Partial fix