medium6.5
CVE-2018-1096
An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1.
Impact
An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Theforeman | Foreman | before 1.16.1 |
| Redhat | Satellite | Version 6.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://projects.theforeman.org/issues/23028
- https://access.redhat.com/errata/RHSA-2018:2927
- https://bugzilla.redhat.com/show_bug.cgi?id=1561061
- http://projects.theforeman.org/issues/23028
- https://access.redhat.com/errata/RHSA-2018:2927
- https://bugzilla.redhat.com/show_bug.cgi?id=1561061