CVE-2016-3728

概要

参考情報

• projects.theforeman.org/issues/14931
• theforeman.org/security.html · Vendor Advisory
• openwall.com/lists/oss-security/2016/05/19/2
• access.redhat.com/errata/RHBA-2016:1501
• theforeman/smart-proxy commit eef532a

foreman のその他の脆弱性

• CVE-2026-12542高 7.8A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The s…
• CVE-2026-96659緊急 9.1A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized informa…
• CVE-2026-96658高 8.8A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary…
• CVE-2026-5142中 6.5A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download priv…
• CVE-2026-5138中 4.3A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerabil…