facter vulnerabilities (Red Hat)
30 vulnerabilities.
-
facterRed Hat The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a... 9.8 Critical -
facterRed Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... 6.5 Medium -
facterRed Hat mcollective has a default password set at install 9.8 Critical -
facterRed Hat openshift-origin-node Improper Input Validation vulnerability 5.5 Medium -
facterRed Hat The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a... 6.5 Medium -
facterRed Hat qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ... 7.5 High -
facterRed Hat Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,... 5.4 Medium -
facterRed Hat Moderate severity vulnerability that affects org.apache.qpid:proton-j 6.5 Medium -
facterRed Hat CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94... 4.3 Medium -
facterRed Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... 6.0 Medium -
facterRed Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... 5.0 Medium -
facterRed Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... 4.0 Medium -
facterRed Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... 5.0 Medium -
facterRed Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... 4.3 Medium -
facterRed Hat Rack vulnerable to Denial of Service via large parameter depth request 5.0 Medium -
facterRed Hat MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service... 5.0 Medium -
facterRed Hat Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass... 5.0 Medium -
facterRed Hat Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows... 7.5 High -
facterRed Hat Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number... 2.1 Low -
facterRed Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks 4.3 Medium -
facterRed Hat Jenkins Cross-Site Request Forgery vulnerabilities 6.8 Medium -
facterRed Hat Jenkins vulnerable to Cross-site Scripting 2.1 Low -
facterRed Hat Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome... 7.5 High -
facterRed Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces 5.8 Medium -
facterRed Hat Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and... 3.6 Low -
facterRed Hat Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service 5.1 Medium -
facterRed Hat Puppet Improper Input Validation vulnerability 7.5 High -
facterRed Hat Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,... 4.3 Medium -
facterRed Hat Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in... 4.3 Medium -
facterRed Hat Apache Tomcat affected by vulnerability in TLS and SSL protocol 5.8 Medium