NVD

Id
20416  
Name
CVE-2016-4995  
Description
Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information via a URL with a hostname.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-08-19  
Modified Date
2016-08-22  
Seq
2016-4995  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111593 20416 CVE-2016-4995 http://projects.theforeman.org/issues/15490  View
111594 20416 CVE-2016-4995 http://projects.theforeman.org/projects/foreman/repository/revisions/c3c186de12be15e55d9582e54659f765304a1073  View
111595 20416 CVE-2016-4995 https://theforeman.org/security.html#2016-4995  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3651 JVNDB-2016-004424 Foreman における重要なホスト設定情報を取得される脆弱性 Foreman は、プロビジョニングテンプレートのプレビューへのアクセスを適切に制限しないため、重要なホスト設定情報を取得される脆弱性が存在します。 CVE-2016-4995 91501 CVE-2016-4995 20416 3.5 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004424.html 2016-07-13 2016-08-23 View