CVE-2014-3590 | BDVDB-2026-128504 Detail

Red Hat Satellite 6Red Hat Satellite 6

Description#

Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security-tracker.debian.org/tracker/CVE-2014-3590
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3590
https://access.redhat.com/security/cve/cve-2014-3590

Exploit#

No public exploit known

History#

Version 12020-01-02Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.