PT-2016-6210

CVE-2016-4995

·

Publicado

2016-08-19

·

Atualizado

2023-02-12

Descrição por

CVSS 3.1
5.3
Média
MétricasAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.11.4 Foreman versions 1.12.x prior to 1.12.1
Description The issue allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information. This is possible because access to preview provisioning templates is not properly restricted.
Recommendations For Foreman versions prior to 1.11.4, update to version 1.11.4 or later. For Foreman versions 1.12.x prior to 1.12.1, update to version 1.12.1 or later.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Identificadores relacionados
CVE-2016-4995
RHSA-2018:0336
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com