Published: 05/04/2018 Updated: 09/10/2019

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

An input sanitization flaw was found in the id field in the dashboard controller of Foreman prior to 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.

Vulnerable Product	Search on Vulmon	Subscribe to Product
theforeman foreman
redhat satellite 6.4

Synopsis Important: Satellite 64 security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat Satellite 64 for RHEL 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring ...

An input sanitization flaw was found in the id field of the dashboard controller A user could use this flaw to perform a SQL injection attack on the back-end database ...

CWE-89 https://bugzilla.redhat.com/show_bug.cgi?id=1561061 http://projects.theforeman.org/issues/23028 https://access.redhat.com/errata/RHSA-2018:2927 https://access.redhat.com/errata/RHSA-2018:2927 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2018-1096

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-1096

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect