CVE-2014-0192

Published: May 8, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."

Affected (5)

Products: Theforeman: Foreman

Theforeman

1 product

Foreman

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Theforeman Foreman	Version 1.4.0
Theforeman Foreman	Version 1.4.1
Theforeman Foreman	Version 1.4.2
Theforeman Foreman	Version 1.4.3
Theforeman Foreman	Version 1.4.4