ruby193-rubygem-secure_headers vulnerabilities (Red Hat)
12 vulnerabilities.
-
ruby193-rubygem-secure_headersRed Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... 6.5 Medium -
ruby193-rubygem-secure_headersRed Hat CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94... 4.3 Medium -
ruby193-rubygem-secure_headersRed Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... 6.0 Medium -
ruby193-rubygem-secure_headersRed Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... 5.0 Medium -
ruby193-rubygem-secure_headersRed Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... 4.0 Medium -
ruby193-rubygem-secure_headersRed Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... 5.0 Medium -
ruby193-rubygem-secure_headersRed Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... 4.3 Medium -
ruby193-rubygem-secure_headersRed Hat vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management... 6.5 Medium -
ruby193-rubygem-secure_headersRed Hat Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to... 4.0 Medium -
ruby193-rubygem-secure_headersRed Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks 4.3 Medium -
ruby193-rubygem-secure_headersRed Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces 5.8 Medium -
ruby193-rubygem-secure_headersRed Hat Apache Tomcat affected by vulnerability in TLS and SSL protocol 5.8 Medium