Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: The Foreman Project Component: Foreman Ansible Clear all filters
TI-2021-02537 CVE-2021-3589 · GHSA-vvff-6wrr-4g7q

Missing authentication in Foreman Ansible

Priority LOW 37

An authorization flaw was found in Foreman Ansible.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01047 Published 2022-03-23 Partial fix · 2.0.0 CWE-306
TI-2020-08615 CVE-2020-10716 · GHSA-w5v4-7h7x-xfvq

Improper authorization in rubygem-foreman_ansible

Priority LOW 30

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00768 Published 2021-05-27 Fixed CWE-285