Foreman

foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action.

Published: 2018-07-26T13:00:00.000Z
Updated: 2024-08-05T16:04:11.865Z

Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted by these permissions on all administrator user object outside of their scope, such as editing global admin accounts including changing their passwords.

Published: 2017-05-26T16:00:00.000Z
Updated: 2024-08-05T16:04:11.828Z

foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion.

Published: 2018-09-10T15:00:00.000Z
Updated: 2024-08-06T01:50:47.463Z

foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.

Published: 2018-09-10T15:00:00.000Z
Updated: 2024-08-06T01:50:47.449Z

Foreman has improper input validation which could lead to partial Denial of Service

Published: 2019-12-11T14:11:04.000Z
Updated: 2024-08-06T09:05:38.172Z