hiera vulnerabilities (Red Hat)
44 vulnerabilities.
-
hieraRed Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... 6.5 Medium -
hieraRed Hat It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce... 7.4 High -
hieraRed Hat katello SQL Injection vulnerability 4.3 Medium -
hieraRed Hat foreman before version 1.15.0 is vulnerable to an information leak through organizations and... 4.3 Medium -
hieraRed Hat foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper... 4.3 Medium -
hieraRed Hat It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or... 6.1 Medium -
hieraRed Hat A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman... 6.1 Medium -
hieraRed Hat A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH... 6.4 Medium -
hieraRed Hat A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure... 7.3 High -
hieraRed Hat A flaw was found in foreman before version 1.15 in the logging of adding and registering images.... 6.5 Medium -
hieraRed Hat foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An... 4.7 Medium -
hieraRed Hat hammer_cli_foreman Improper Certificate Validation vulnerability 8.1 High -
hieraRed Hat The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a... 6.5 Medium -
hieraRed Hat A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8... 6.5 Medium -
hieraRed Hat qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ... 7.5 High -
hieraRed Hat discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes... 7.0 High -
hieraRed Hat Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords. 7.5 High -
hieraRed Hat The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key. 5.5 Medium -
hieraRed Hat Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the... 8.2 High -
hieraRed Hat Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2,... 6.1 Medium -
hieraRed Hat Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview... 5.3 Medium -
hieraRed Hat The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1... 5.0 Medium -
hieraRed Hat safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method 8.1 High -
hieraRed Hat Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,... 5.4 Medium -
hieraRed Hat The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before... 8.8 High -
hieraRed Hat Moderate severity vulnerability that affects org.apache.qpid:proton-j 6.5 Medium -
hieraRed Hat CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94... 4.3 Medium -
hieraRed Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... 6.0 Medium -
hieraRed Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... 5.0 Medium -
hieraRed Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... 4.0 Medium -
hieraRed Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... 5.0 Medium -
hieraRed Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... 4.3 Medium -
hieraRed Hat Rack vulnerable to Denial of Service via large parameter depth request 5.0 Medium -
hieraRed Hat MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service... 5.0 Medium -
hieraRed Hat Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass... 5.0 Medium -
hieraRed Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks 4.3 Medium -
hieraRed Hat Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome... 7.5 High -
hieraRed Hat will_paginate Cross-site Scripting vulnerability 4.3 Medium -
hieraRed Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces 5.8 Medium -
hieraRed Hat Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and... 3.6 Low -
hieraRed Hat Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service 5.1 Medium -
hieraRed Hat Puppet Improper Input Validation vulnerability 7.5 High -
hieraRed Hat Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,... 4.3 Medium -
hieraRed Hat Apache Tomcat affected by vulnerability in TLS and SSL protocol 5.8 Medium