Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1092354 - (CVE-2014-0192) CVE-2014-0192 Foreman: provisioning templates are world accessible
CVE-2014-0192 Foreman: provisioning templates are world accessible
Status: CLOSED CURRENTRELEASE
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
impact=moderate,public=20140425,repor...
: Security
Depends On: 1092832
Blocks: 1092357
  Show dependency tree / graph
 
Reported: 2014-04-29 03:07 EDT by Kurt Seifried
Modified: 2016-04-26 11:22 EDT (History)
21 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2015-05-20 01:29:14 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Kurt Seifried 2014-04-29 03:07:51 EDT 
Ohad Levy of Red Hat reports:

since 1e0fd283 it is possible to override spoof by providing a hostname parameters.

this would allow to retrieve any template of any host bypassing authentication.

External references:
http://projects.theforeman.org/issues/5436
http://projects.theforeman.org/projects/foreman/repository/revisions/1e0fd283180dc6bda30c880898cdea69cb579194

Fixed in:
https://github.com/theforeman/foreman/pull/1404
https://github.com/theforeman/foreman/commit/aa0ebe8
Comment 1 Dominic Cleal 2014-04-29 03:57:56 EDT 
http://theforeman.org/security.html updated with statement.
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.