CVE-2013-4182

7.5

HIGHCVSS v2

Published

September 16, 2013

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.

foreman

NPMNode Implementation of Foreman

<= 1.2.1, = 1.2.0NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

<= 1.2.1, = 1.2.0NVD

foreman

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Process manager for applications with multiple components

<= 1.2.1, = 1.2.0NVD

ddollar/foreman

GitHubManage Procfile-based applications

<= 1.2.1, = 1.2.0NVD

Security Advisories

CVE-2013-4182

Description

More on this CVE