Foreman vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20185
3. 20191

Newest CVEs

• CVE-2014-0091

  Foreman has improper input validation which could lead to partial Denial of Service

  Foreman · Foreman

  Medium5.3
• CVE-2016-7078

  foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_…

  Foreman · foreman

  Medium4.3
• CVE-2016-7077

  foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects.…

  Foreman · foreman

  Medium4.3
• CVE-2016-9595

  A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to…

  Foreman · katello-debug

  High7.3
• CVE-2017-7535

  foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign…

  Foreman · foreman

  Medium6.1
• CVE-2017-2667

  Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a…

  Foreman · Hammer CLI

  High8.1
• CVE-2017-7505

  Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some…

  Foreman · foreman

  High8.8