CVE-2014-0192

5

MEDIUMCVSS v2

Published

May 8, 2014

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."

foreman

NPMNode Implementation of Foreman

= 1.4.1, = 1.4.3, = 1.4.2, = 1.4.0, = 1.4.4NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

= 1.4.1, = 1.4.3, = 1.4.2, = 1.4.0, = 1.4.4NVD

foreman

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Process manager for applications with multiple components

= 1.4.1, = 1.4.3, = 1.4.2, = 1.4.0, = 1.4.4NVD

ddollar/foreman

GitHubManage Procfile-based applications

= 1.4.1, = 1.4.3, = 1.4.2, = 1.4.0, = 1.4.4NVD

Security Advisories

CVE-2014-0192

Description

More on this CVE