Read the docs
TI-2017-05148 Aliases CVE-2017-7505GHSA-r979-3cmv-8p2v

Incorrect authorization in foreman

Priority MEDIUM 41CWE-863Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass, Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-863 and CWE-269.

Summary

Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted by these permissions on all administrator user object outside of their scope, such as editing global admin accounts including changing their passwords.

Why it matters now

EPSS 0.01588 75th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
The Foreman Projectforeman1.5 and higher—No fix listedCNA

CPE configurations NVD · 75

CPEVersionsRoleVendor
cpe:2.3:a:theforeman:foreman:1.5.0:*:*:*:*:*:*:*1.5.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.5.0:rc1:*:*:*:*:*:*1.5.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.5.0:rc2:*:*:*:*:*:*1.5.0 rc2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.5.1:*:*:*:*:*:*:*1.5.1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.5.2:*:*:*:*:*:*:*1.5.2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.5.3:*:*:*:*:*:*:*1.5.3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.6.0:*:*:*:*:*:*:*1.6.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.6.0:rc1:*:*:*:*:*:*1.6.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.6.0:rc2:*:*:*:*:*:*1.6.0 rc2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableThe Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.5.0:rc1:*:*:*:*:*:* Versions 1.5.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.5.0:rc2:*:*:*:*:*:* Versions 1.5.0 rc2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.5.3:*:*:*:*:*:*:* Versions 1.5.3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.6.0:rc1:*:*:*:*:*:* Versions 1.6.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.6.0:rc2:*:*:*:*:*:* Versions 1.6.0 rc2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·The Foreman Project
Show 65 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:theforeman:foreman:1.6.3:*:*:*:*:*:*:*1.6.3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.7.0:*:*:*:*:*:*:*1.7.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.7.0:rc1:*:*:*:*:*:*1.7.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.7.0:rc2:*:*:*:*:*:*1.7.0 rc2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.7.1:*:*:*:*:*:*:*1.7.1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.7.2:*:*:*:*:*:*:*1.7.2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.7.3:*:*:*:*:*:*:*1.7.3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.7.4:*:*:*:*:*:*:*1.7.4VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.7.5:*:*:*:*:*:*:*1.7.5VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.8.0:*:*:*:*:*:*:*1.8.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.8.0:rc1:*:*:*:*:*:*1.8.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.8.0:rc2:*:*:*:*:*:*1.8.0 rc2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.8.0:rc3:*:*:*:*:*:*1.8.0 rc3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.8.1:*:*:*:*:*:*:*1.8.1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.8.2:*:*:*:*:*:*:*1.8.2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.8.3:*:*:*:*:*:*:*1.8.3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.8.4:*:*:*:*:*:*:*1.8.4VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.9.0:*:*:*:*:*:*:*1.9.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.9.0:rc1:*:*:*:*:*:*1.9.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.9.0:rc2:*:*:*:*:*:*1.9.0 rc2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.9.0:rc3:*:*:*:*:*:*1.9.0 rc3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.9.1:*:*:*:*:*:*:*1.9.1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.9.2:*:*:*:*:*:*:*1.9.2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.9.3:*:*:*:*:*:*:*1.9.3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.10.0:*:*:*:*:*:*:*1.10.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.10.0:rc1:*:*:*:*:*:*1.10.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.10.0:rc2:*:*:*:*:*:*1.10.0 rc2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.10.0:rc3:*:*:*:*:*:*1.10.0 rc3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.10.1:*:*:*:*:*:*:*1.10.1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.10.2:*:*:*:*:*:*:*1.10.2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.10.3:*:*:*:*:*:*:*1.10.3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.10.4:*:*:*:*:*:*:*1.10.4VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*1.11.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*1.11.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.11.0:rc2:*:*:*:*:*:*1.11.0 rc2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.11.0:rc3:*:*:*:*:*:*1.11.0 rc3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.11.1:*:*:*:*:*:*:*1.11.1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.11.2:*:*:*:*:*:*:*1.11.2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.11.3:*:*:*:*:*:*:*1.11.3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.11.4:*:*:*:*:*:*:*1.11.4VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.12.0:*:*:*:*:*:*:*1.12.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.12.0:rc1:*:*:*:*:*:*1.12.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.12.0:rc2:*:*:*:*:*:*1.12.0 rc2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.12.0:rc3:*:*:*:*:*:*1.12.0 rc3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.12.1:*:*:*:*:*:*:*1.12.1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.12.2:*:*:*:*:*:*:*1.12.2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.12.3:*:*:*:*:*:*:*1.12.3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.12.4:*:*:*:*:*:*:*1.12.4VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.13.0:*:*:*:*:*:*:*1.13.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.13.0:rc1:*:*:*:*:*:*1.13.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.13.0:rc2:*:*:*:*:*:*1.13.0 rc2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.13.1:*:*:*:*:*:*:*1.13.1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.13.2:*:*:*:*:*:*:*1.13.2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.13.3:*:*:*:*:*:*:*1.13.3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.13.4:*:*:*:*:*:*:*1.13.4VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.14.0:*:*:*:*:*:*:*1.14.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.14.0:rc1:*:*:*:*:*:*1.14.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.14.0:rc2:*:*:*:*:*:*1.14.0 rc2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.14.0:rc3:*:*:*:*:*:*1.14.0 rc3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.14.1:*:*:*:*:*:*:*1.14.1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.14.2:*:*:*:*:*:*:*1.14.2VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.14.3:*:*:*:*:*:*:*1.14.3VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.15.0:*:*:*:*:*:*:*1.15.0VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.15.0:rc1:*:*:*:*:*:*1.15.0 rc1VulnerableThe Foreman Project
cpe:2.3:a:theforeman:foreman:1.15.0:rc2:*:*:*:*:*:*1.15.0 rc2VulnerableThe Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.7.0:rc1:*:*:*:*:*:* Versions 1.7.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.7.0:rc2:*:*:*:*:*:* Versions 1.7.0 rc2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.7.1:*:*:*:*:*:*:* Versions 1.7.1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.7.2:*:*:*:*:*:*:* Versions 1.7.2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.7.3:*:*:*:*:*:*:* Versions 1.7.3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.7.4:*:*:*:*:*:*:* Versions 1.7.4 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.7.5:*:*:*:*:*:*:* Versions 1.7.5 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.8.0:rc1:*:*:*:*:*:* Versions 1.8.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.8.0:rc2:*:*:*:*:*:* Versions 1.8.0 rc2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.8.0:rc3:*:*:*:*:*:* Versions 1.8.0 rc3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.8.3:*:*:*:*:*:*:* Versions 1.8.3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.9.0:rc1:*:*:*:*:*:* Versions 1.9.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.9.0:rc2:*:*:*:*:*:* Versions 1.9.0 rc2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.9.0:rc3:*:*:*:*:*:* Versions 1.9.0 rc3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.9.1:*:*:*:*:*:*:* Versions 1.9.1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.9.2:*:*:*:*:*:*:* Versions 1.9.2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.9.3:*:*:*:*:*:*:* Versions 1.9.3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.10.0:rc1:*:*:*:*:*:* Versions 1.10.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.10.0:rc2:*:*:*:*:*:* Versions 1.10.0 rc2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.10.0:rc3:*:*:*:*:*:* Versions 1.10.0 rc3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.10.1:*:*:*:*:*:*:* Versions 1.10.1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.10.2:*:*:*:*:*:*:* Versions 1.10.2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.10.3:*:*:*:*:*:*:* Versions 1.10.3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.10.4:*:*:*:*:*:*:* Versions 1.10.4 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:* Versions 1.11.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:* Versions 1.11.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.11.0:rc2:*:*:*:*:*:* Versions 1.11.0 rc2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.11.0:rc3:*:*:*:*:*:* Versions 1.11.0 rc3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.11.1:*:*:*:*:*:*:* Versions 1.11.1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.11.2:*:*:*:*:*:*:* Versions 1.11.2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.11.3:*:*:*:*:*:*:* Versions 1.11.3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.11.4:*:*:*:*:*:*:* Versions 1.11.4 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.12.0:*:*:*:*:*:*:* Versions 1.12.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.12.0:rc1:*:*:*:*:*:* Versions 1.12.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.12.0:rc2:*:*:*:*:*:* Versions 1.12.0 rc2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.12.0:rc3:*:*:*:*:*:* Versions 1.12.0 rc3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.12.1:*:*:*:*:*:*:* Versions 1.12.1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.12.2:*:*:*:*:*:*:* Versions 1.12.2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.12.3:*:*:*:*:*:*:* Versions 1.12.3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.12.4:*:*:*:*:*:*:* Versions 1.12.4 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.13.0:*:*:*:*:*:*:* Versions 1.13.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.13.0:rc1:*:*:*:*:*:* Versions 1.13.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.13.0:rc2:*:*:*:*:*:* Versions 1.13.0 rc2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.13.1:*:*:*:*:*:*:* Versions 1.13.1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.13.2:*:*:*:*:*:*:* Versions 1.13.2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.13.3:*:*:*:*:*:*:* Versions 1.13.3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.13.4:*:*:*:*:*:*:* Versions 1.13.4 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.14.0:*:*:*:*:*:*:* Versions 1.14.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.14.0:rc1:*:*:*:*:*:* Versions 1.14.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.14.0:rc2:*:*:*:*:*:* Versions 1.14.0 rc2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.14.0:rc3:*:*:*:*:*:* Versions 1.14.0 rc3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.14.2:*:*:*:*:*:*:* Versions 1.14.2 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.14.3:*:*:*:*:*:*:* Versions 1.14.3 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.15.0:rc1:*:*:*:*:*:* Versions 1.15.0 rc1 Vulnerable ·The Foreman Project
  • cpe:2.3:a:theforeman:foreman:1.15.0:rc2:*:*:*:*:*:* Versions 1.15.0 rc2 Vulnerable ·The Foreman Project

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Ceph Storage 1.3AffectedNo fix planned: Will not fix
Red Hat Satellite 6Affected—

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-7505
  2. 2026-10-03 Alias added: GHSA-r979-3cmv-8p2v

References

Patch 2

  • TI-2026-01620 Forman: foreman: remote code execution via command injection in websocket proxy CVSS 3.1HIGH 8.8
  • TI-2018-10506 Improper authentication in [UNKNOWN] smart_proxy_dynflow CVSS 3.0CRITICAL 9.8
  • TI-2013-01890 Eval injection vulnerability in the create method in the Bookmarks controller in Foreman… CVSS 2.0MEDIUM 6.0
  • TI-2013-01882 The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2… CVSS 2.0MEDIUM 6.0
  • TI-2022-03551 Os command injection via ct_command and fcct_command CVSS 3.1CRITICAL 9.1
  • TI-2023-00113 Foreman: arbitrary code execution through templates CVSS 3.1CRITICAL 9.1
See all 85 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences