Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2016-5390 — LOW severity vulnerability | Release Alert

CVE-2016-5390

3.5

LOWCVSS v2

Published

August 19, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view_hosts permission containing a filter to obtain sensitive network interface information via a request to API routes beneath "hosts," as demonstrated by a GET request to api/v2/hosts/secrethost/interfaces.

NPMNode Implementation of Foreman

>= 1.11.0, < 1.11.4, >= 1.12.0, < 1.12.1NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

>= 1.11.0, < 1.11.4, >= 1.12.0, < 1.12.1NVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python library to manipulate The Foreman through the API

>= 1.11.0, < 1.11.4, >= 1.12.0, < 1.12.1NVD

RubyGemsProcess manager for applications with multiple components

>= 1.11.0, < 1.11.4, >= 1.12.0, < 1.12.1NVD

ddollar/foreman

GitHubManage Procfile-based applications

>= 1.11.0, < 1.11.4, >= 1.12.0, < 1.12.1NVD