Main Vulnerability Database Vulnerabilities #VU41709

Improper Authentication in Foreman - CVE-2014-0090

Published: May 8, 2014 / Updated: August 10, 2020

Vulnerability identifier: #VU41709

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2014-0090

CWE-ID: CWE-287

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Foreman

Affected software:
Foreman

Detailed vulnerability description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie.

Install update from vendor's website.