CVE-2013-4182 | BDVDB-2026-57438 Detail

Description#

app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rhn.redhat.com/errata/RHSA-2013-1196.html
https://bugzilla.redhat.com/show_bug.cgi?id=990374
http://theforeman.org/manuals/1.2/index.html#Releasenotesfor1.2.2
http://projects.theforeman.org/issues/2863

Exploit#

No public exploit known

History#

Version 12013-09-16Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.