CVE-2013-4386

Related Files

Red Hat Security Advisory 2013-1522-01

Posted Nov 14, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-1522-01 - The Foreman packages provide facilities for rapidly deploying Red Hat OpenStack 3.0. These packages are provided as a Technology Preview. For more information on the scope and nature of support for items marked as Technology Preview, refer to https://access.redhat.com/support/offerings/techpreview/ It was found that Foreman did not correctly sanitize values of the "fqdn" and "hostgroup" parameters, allowing an attacker to provide a specially crafted value for these parameters and perform an SQL injection attack.

tags | advisory, web, sql injection

systems | linux, redhat

advisories | CVE-2013-4386

SHA-256 | 882fbca6772b0916e0958e824ed243b5219a9837225a71e9a0e65782c286fb07

Download | Favorite | View