foreman

5 results · Clear filters · Feed

• Medium 5.0
  CVE-2025-9572

  Foreman: satellite: graphql api permission bypass leads to information disclosure

  n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an …

  Red Hat The Foreman Project Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.17 for RHEL 9
  Feb 27, 2026
• Medium 4.9
  CVE-2019-3893

  In Foreman it was discovered that the delete compute resource operation, when executed from the Foreman API, leads to t…

  The Foreman Project foreman
  Apr 9, 2019
• Medium 6.1
  CVE-2016-8639

  It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could …

  The Foreman Project foreman
  Aug 1, 2018
• Medium 6.1
  CVE-2016-8634

  A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains…

  The Foreman Project foreman
  Aug 1, 2018
• Medium 6.4
  CVE-2016-8613

  A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI.…

  The Foreman Project foreman
  Jul 31, 2018