Researchers
Back
Keqin Hong
Researcher from
Red Hat HSS Pen-Test Team
#24981
of 60,591
11.1
Total CVSS
Vulnerabilities
·
2
Medium
2
PT-2014-3474
2014-05-08
6.8
CVE-2014-0090
Foreman
Foreman
The issue allows remote attackers to hijack web sessions. This is achieved via the session id cookie.
PT-2014-3473
2014-03-27
4.3
CVE-2014-0089
Foreman
Foreman
A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.