Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."
Loading...
Loading...
Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."
May 8, 2014
May 6, 2026
See which npm, PyPI, Go, and Maven packages are affected by CVE-2014-0192
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.