Read the docs

The Foreman Project

Records108All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

The Foreman Project records in CISA KEV

No The Foreman Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Foreman 86 records HIGH Katello 10 records MEDIUM Foreman Ansible 2 records LOW Hammer Cli 2 records LOW Foreman-tasks 1 record LOW Foreman Azurerm 1 record LOW Foremanfogproxmox 1 record LOW Kafo 1 record LOW

Records

2 records in Foreman Ansible · all components

TI-2021-02537 CVE-2021-3589 · GHSA-vvff-6wrr-4g7q

Missing authentication in Foreman Ansible

Priority LOW 37

An authorization flaw was found in Foreman Ansible.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01047 Published 2022-03-23 Partial fix · 2.0.0 CWE-306
TI-2020-08615 CVE-2020-10716 · GHSA-w5v4-7h7x-xfvq

Improper authorization in rubygem-foreman_ansible

Priority LOW 30

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00768 Published 2021-05-27 Fixed CWE-285
Open these records in search →