Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-20260 — HIGH severity vulnerability | Release Alert

CVE-2021-20260

7.8

HIGHCVSS v3

Published

August 26, 2022

Affected

8 projects

Assigned by

Red Hat

Severity scale

010

Description

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

NPMNode Implementation of Foreman

all versionsNVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

all versionsNVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python library to manipulate The Foreman through the API

all versionsNVD

Crates.ioToolchain manager for simple binary tools

all versionsNVD

NuGet GalleryForeman

all versionsNVD

RubyGemsProcess manager for applications with multiple components

all versionsNVD

GitHubToolchain manager for Roblox projects

all versionsNVD

ddollar/foreman

GitHubManage Procfile-based applications

all versionsNVD