The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors involving the password lifetime period in Active Directory.
| Software | From | Fixed in |
|---|---|---|
| theforeman / foreman | 1.9.0 | 1.9.0.x |