Skip to content
OpenAdvisories
Unscored RHSA-2013:1196 2 CVEs

Red Hat Security Advisory: Foreman security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 ruby193-foreman 0:1.1.10014-1.2.el6ost
Red Hat · OpenStack 3 openstack:3::el6 ruby193-foreman-mysql 0:1.1.10014-1.2.el6ost

Vulnerabilities 2

  • Unscored —
    CVE-2013-4180

    The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a…

  • Unscored —
    CVE-2013-4182

    app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which al…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/support/offerings/techpreview/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=989755
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=990374
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1196.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4180
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4180
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4180
  • report
    https://access.redhat.com/security/cve/CVE-2013-4182
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4182
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4182