Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2r38-hrvx-f45r

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."

EPSS

Процентиль: 65%
0.00493
Низкий

Связанные уязвимости

redhat
почти 12 лет назад

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."

nvd
больше 11 лет назад

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."

debian
больше 11 лет назад

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provis ...

EPSS

Процентиль: 65%
0.00493
Низкий