Описание
app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenStack Platform 4 | ruby193-foreman | Affected | ||
| OpenStack 3 for RHEL 6 | ruby193-foreman | Fixed | RHSA-2013:1196 | 03.09.2013 |
| Red Hat Satellite 6.0 | foreman | Fixed | RHEA-2014:1175 | 10.09.2014 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS2
Связанные уязвимости
app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.
app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.
app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 doe ...
app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.
EPSS
6.5 Medium
CVSS2