PT-2016-6210
CVE-2016-4995
·
تاريخ النشر
2016-08-19
·
تاريخ التحديث
2023-02-12
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Foreman versions prior to 1.11.4
Foreman versions 1.12.x prior to 1.12.1
Description
The issue allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information. This is possible because access to preview provisioning templates is not properly restricted.
Recommendations
For Foreman versions prior to 1.11.4, update to version 1.11.4 or later.
For Foreman versions 1.12.x prior to 1.12.1, update to version 1.12.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾