Skip to content

pulp-puppet-admin-extensions vulnerabilities (Red Hat)

133 vulnerabilities.

pulp-puppet-admin-extensions Red HatForeman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the...CVE-2015-51528.1 HighJuly 14, 2017
pulp-puppet-admin-extensions Red HatPulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.CVE-2016-37047.5 HighJune 13, 2017
pulp-puppet-admin-extensions Red HatThe pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.CVE-2016-36965.5 MediumJune 13, 2017
pulp-puppet-admin-extensions Red Hatclient/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer...CVE-2016-31127.5 HighJune 8, 2017
pulp-puppet-admin-extensions Red Hatpulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate...CVE-2016-31115.5 MediumJune 8, 2017
pulp-puppet-admin-extensions Red HatThe pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or...CVE-2016-31087.1 HighJune 8, 2017
pulp-puppet-admin-extensions Red HatThe Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world...CVE-2016-31075.5 MediumJune 8, 2017
pulp-puppet-admin-extensions Red HatVersions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the...CVE-2017-2295Fix available8.2 HighMay 25, 2017
pulp-puppet-admin-extensions Red HatDjango open redirect and possible XSS attack via user-supplied numeric redirect URLsCVE-2017-7233Fix available6.1 MediumApril 4, 2017
pulp-puppet-admin-extensions Red HatQOS.ch Logback vulnerable to Deserialization of Untrusted DataCVE-2017-5929Fix available9.8 CriticalMarch 13, 2017
pulp-puppet-admin-extensions Red HatDenial of service in JBoss resteasyCVE-2016-6346Fix available7.5 HighSeptember 7, 2016
pulp-puppet-admin-extensions Red HatCross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2,...CVE-2016-63196.1 MediumAugust 19, 2016
pulp-puppet-admin-extensions Red HatForeman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview...CVE-2016-49955.3 MediumAugust 19, 2016
pulp-puppet-admin-extensions Red HatThe (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1...CVE-2016-44515.0 MediumAugust 19, 2016
pulp-puppet-admin-extensions Red HatForced Browsing in TwistedCVE-2016-1000111Fix available5.3 MediumJuly 18, 2016
pulp-puppet-admin-extensions Red HatEval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman...CVE-2016-37288.8 HighMay 20, 2016
pulp-puppet-admin-extensions Red Hatsafemode gem allows context-dependent attackers to obtain sensitive information via the inspect methodCVE-2016-3693Fix available8.1 HighMay 20, 2016
pulp-puppet-admin-extensions Red HatThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...CVE-2016-1669Fix available8.8 HighMay 13, 2016
pulp-puppet-admin-extensions Red HatBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...CVE-2015-6644Fix available3.3 LowJanuary 6, 2016
pulp-puppet-admin-extensions Red HatMultiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10...CVE-2015-7518Fix available4.3 MediumDecember 17, 2015
pulp-puppet-admin-extensions Red HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...CVE-2015-32356.0 MediumAugust 14, 2015
pulp-puppet-admin-extensions Red HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...CVE-2015-31555.0 MediumAugust 14, 2015
pulp-puppet-admin-extensions Red HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...CVE-2015-18444.0 MediumAugust 14, 2015
pulp-puppet-admin-extensions Red HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...CVE-2015-18165.0 MediumAugust 14, 2015
pulp-puppet-admin-extensions Red HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...CVE-2014-36534.3 MediumJuly 6, 2015
pulp-puppet-admin-extensions Red Hatrest-client Gem Vulnerable to Session FixationCVE-2015-1820Fix available9.8 CriticalMay 15, 2015
pulp-puppet-admin-extensions Red Hatrest-client allows local users to obtain sensitive information by reading the logCVE-2015-3448Fix available2.1 LowApril 29, 2015
pulp-puppet-admin-extensions Red HatSmart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2...CVE-2014-3691Fix available7.5 HighMarch 9, 2015
pulp-puppet-admin-extensions Red HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacksCVE-2013-4346Fix available4.3 MediumMay 20, 2014
pulp-puppet-admin-extensions Red Hatwill_paginate Cross-site Scripting vulnerabilityCVE-2013-6459Fix available4.3 MediumDecember 31, 2013
pulp-puppet-admin-extensions Red HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate noncesCVE-2013-4347Fix available5.8 MediumOctober 25, 2013
pulp-puppet-admin-extensions Red HatThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...CVE-2014-3566Public exploitFix availableEPSS 100.0%3.4 LowAugust 30, 2012
pulp-puppet-admin-extensions Red HatApache Tomcat affected by vulnerability in TLS and SSL protocolCVE-2009-3555Public exploitFix availableEPSS 87.3%5.8 MediumNovember 9, 2009