high7.5
CVE-2013-0210
The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet command…
Impact
The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Theforeman | Foreman | through 1.0 Versions 0.1, 0.2, 0.3, 0.4, 0.4.1 |