Theforeman: >> Foreman >> 1.2.1 Security Vulnerabilities
The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service (memory consumption) via unspecified input that is converted to a symbol.
CVSS Score
5.0
EPSS Score
0.005
Published
2013-09-16
app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.
CVSS Score
7.5
EPSS Score
0.007
Published
2013-09-16
Page 5