medium6.4
CVE-2014-4507
Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a ..
Impact
Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the dst parameter to tftp/fetch_boot_file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Theforeman | Foreman | through 1.4.4 Versions 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.5.0 |