Theforeman Foremanfogproxmox vulnerabilities

1 known vulnerability affecting theforeman/foremanfogproxmox.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2021-20259HIGHCVSS 7.8fixed in 0.13.12021-06-07

CVE-2021-20259 [HIGH] CWE-200 CVE-2021-20259: A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through t A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Versions before foreman_fog_proxmox 0.13.1 are affected