Read the docs

The Foreman Project

Records108All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

The Foreman Project records in CISA KEV

No The Foreman Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Foreman 86 records HIGH Katello 10 records MEDIUM Foreman Ansible 2 records LOW Hammer Cli 2 records LOW Foreman-tasks 1 record LOW Foreman Azurerm 1 record LOW Foremanfogproxmox 1 record LOW Kafo 1 record LOW

Records

1 record in Kafo · all components

TI-2014-00129 CVE-2014-0135 · GHSA-hxvp-655x-xxqv

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable…

Priority LOW 10

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file.

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00331 Published 2014-05-08 Partial fix · 0.3.17, 0.5.2 CWE-264
Open these records in search →