CVE-2016-4995 — Sensitive Information Exposure in Foreman

CWE-200 — Sensitive Information Exposure5 documents5 sources
Severity
5.3MEDIUMNVD
EPSS
0.3%
top 46.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Theforeman Foreman
Timeline
PublishedAug 19
Latest updateMay 14

Description

Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information via a URL with a hostname.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages1 packages

▶NVDtheforeman/foreman1.11.0 — 1.11.4+1

Patches

Patch: projects.theforeman.org ↗Patch: projects.theforeman.org ↗Patch: projects.theforeman.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-mwjw-3593-mrg6: Foreman before 1↗2022-05-14
▶
CVEList
CVE-2016-4995: Foreman before 1↗2016-08-19
▶

📋Vendor Advisories

1
Red Hat
foreman: Information disclosure in provisioning template previews↗2016-06-22
▶

💬Community

1
Bugzilla
CVE-2016-4995 foreman: Information disclosure in provisioning template previews↗2016-06-22
▶
CVE-2016-4995 — Sensitive Information Exposure | cvebase