Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2016-4995 — LOW severity vulnerability | Release Alert

CVE-2016-4995

3.5

LOWCVSS v2

Published

August 19, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information via a URL with a hostname.

NPMNode Implementation of Foreman

>= 1.11.0, < 1.11.4, >= 1.12.0, < 1.12.1NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

>= 1.11.0, < 1.11.4, >= 1.12.0, < 1.12.1NVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python library to manipulate The Foreman through the API

>= 1.11.0, < 1.11.4, >= 1.12.0, < 1.12.1NVD

RubyGemsProcess manager for applications with multiple components

>= 1.11.0, < 1.11.4, >= 1.12.0, < 1.12.1NVD

ddollar/foreman

GitHubManage Procfile-based applications

>= 1.11.0, < 1.11.4, >= 1.12.0, < 1.12.1NVD