Total vulnerabilities in the database
app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request.
| Software | From | Fixed in |
|---|---|---|
| redhat / openstack | 3.0 | 3.0.x |
| theforeman / foreman | - | 1.2.1.x |
| theforeman / foreman | 1.2.0-rc1 | 1.2.0-rc1.x |
| theforeman / foreman | 1.2.0 | 1.2.0.x |
| theforeman / foreman | 1.2.0-rc2 | 1.2.0-rc2.x |