CVE-2015-3235

概要

参考情報

• projects.theforeman.org/issues/10829 · Vendor Advisory
• theforeman.org/manuals/1.9/index.html
• access.redhat.com/errata/RHSA-2015:1591
• access.redhat.com/errata/RHSA-2015:1592
• bugzilla.redhat.com/show_bug.cgi

foreman のその他の脆弱性

• CVE-2026-12542高 7.8A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The s…
• CVE-2026-96659緊急 9.1A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized informa…
• CVE-2026-96658高 8.8A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary…
• CVE-2026-5142中 6.5A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download priv…
• CVE-2026-5138中 4.3A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerabil…