Skip to content
fr Sign in
Not rated

CVE-2021-20259 A flaw was found in the Foreman project

Description

A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Versions before foreman_fog_proxmox 0.13.1 are affected

Affected products and versions

Product Affected versions Fixed in
foreman Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of foreman

The 8 CVEs of foreman →
CVE-2022-3874 A command injection flaw was found in foreman 8.0 High CVE-2023-0462 An arbitrary code execution flaw was found in Foreman 8.0 High CVE-2021-20260 A flaw was found in the Foreman project Not rated CVE-2021-3590 A flaw was found in Foreman project Not rated
Track this CVE