The smart proxy Puppet run API in Foreman prior to 1.2.0 allows remote malicious users to execute arbitrary commands via vectors related to escaping and Puppet commands.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
theforeman foreman |
||
theforeman foreman 0.4.1 |
||
theforeman foreman 0.4 |
||
theforeman foreman 0.2 |
||
theforeman foreman 0.3 |
||
theforeman foreman 0.1 |