Foreman vulnerabilities
3 known vulnerabilities in Foreman from Foreman. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.0 High severity
Foreman: Improper Neutralization of Special Elements used in an OS Command
A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of comma
- 9.1 Critical severity
foreman: Improper Neutralization of Special Elements used in an OS Command
A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command exec
- 9.1 Critical severity
foreman: Improper Control of Generation of Code
An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload.