Foreman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or (2) AJAX request.

Published May 8, 2014 · Updated Aug 6, 2024 · Assigned by redhat