CVE-2013-0210

7.5

HIGHCVSS v2

Published

May 8, 2014

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands.

foreman

NPMNode Implementation of Foreman

= 0.2, = 0.4.1, = 0.3, <= 1.0, = 0.1, = 0.4NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

= 0.2, = 0.4.1, = 0.3, <= 1.0, = 0.1, = 0.4NVD

foreman

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Process manager for applications with multiple components

= 0.2, = 0.4.1, = 0.3, <= 1.0, = 0.1, = 0.4NVD

ddollar/foreman

GitHubManage Procfile-based applications

= 0.2, = 0.4.1, = 0.3, <= 1.0, = 0.1, = 0.4NVD

Security Advisories

CVE-2013-0210

Description

More on this CVE