CVE-2013-2121
Fixed in a distro release EPSS 25%
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.
Products: redhat openstack, theforeman foreman
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack 3 | ruby193-foreman | 0:1.1.10009-3.el6ost |
| Red Hat openstack 3 | ruby193-foreman-mysql | 0:1.1.10009-3.el6ost |
| Red Hat openstack 3 | ruby193-foreman-proxy | 0:1.1.10001-4.el6ost |
| Red Hat openstack 3 | ruby193-openstack-foreman-installer | 0:0.0.18-1.el6ost |
| Red Hat openstack 3 | ruby193-openstack-foreman-installer-debuginfo | 0:0.0.18-1.el6ost |
| Red Hat openstack 3 | ruby193-rubygem-ancestry | 0:1.3.0-5.el6ost |
| Red Hat openstack 3 | ruby193-rubygem-ancestry-doc | 0:1.3.0-5.el6ost |
| Red Hat openstack 3 | ruby193-rubygem-fog | 0:1.10.1-11.el6ost |
| Red Hat openstack 3 | ruby193-rubygem-fog-doc | 0:1.10.1-11.el6ost |
| Red Hat openstack 3 | ruby193-rubygem-mysql | 0:2.8.1-4.el6ost |
| Red Hat openstack 3 | ruby193-rubygem-mysql-debuginfo | 0:2.8.1-4.el6ost |
| Red Hat openstack 3 | ruby193-rubygem-safemode | 0:1.2.0-9.el6ost |
| Red Hat openstack 3 | ruby193-rubygem-safemode-doc | 0:1.2.0-9.el6ost |
| Red Hat satellite 6.0 | foreman | 0:1.6.0.44-1.el6sat |
| Red Hat satellite 6.0 | foreman | 0:1.6.0.44-1.el7sat |
| Red Hat satellite 6.0 | foreman-compute | 0:1.6.0.44-1.el6sat |
| Red Hat satellite 6.0 | foreman-compute | 0:1.6.0.44-1.el7sat |
| Red Hat satellite 6.0 | foreman-gce | 0:1.6.0.44-1.el6sat |
| Red Hat satellite 6.0 | foreman-gce | 0:1.6.0.44-1.el7sat |
| Red Hat satellite 6.0 | foreman-libvirt | 0:1.6.0.44-1.el6sat |
| Red Hat satellite 6.0 | foreman-libvirt | 0:1.6.0.44-1.el7sat |
| Red Hat satellite 6.0 | foreman-ovirt | 0:1.6.0.44-1.el6sat |
| Red Hat satellite 6.0 | foreman-ovirt | 0:1.6.0.44-1.el7sat |
| Red Hat satellite 6.0 | foreman-postgresql | 0:1.6.0.44-1.el6sat |
| Red Hat satellite 6.0 | foreman-postgresql | 0:1.6.0.44-1.el7sat |
| Red Hat satellite 6.0 | foreman-proxy | 0:1.6.0.30-1.el6sat |
| Red Hat satellite 6.0 | foreman-proxy | 0:1.6.0.30-1.el7sat |
| Red Hat satellite 6.0 | foreman-vmware | 0:1.6.0.44-1.el6sat |
| Red Hat satellite 6.0 | foreman-vmware | 0:1.6.0.44-1.el7sat |
| Red Hat satellite 6.0 | katello | 0:1.5.0-30.el7sat |
| Red Hat satellite 6.0 | katello | 0:1.5.0-30.el6sat |
| Red Hat satellite 6.0 | libmongodb | 0:2.4.6-2.el6sat |
| Red Hat satellite 6.0 | mongodb | 0:2.4.9-3.el7sat |
| Red Hat satellite 6.0 | mongodb | 0:2.4.6-2.el6sat |
| Red Hat satellite 6.0 | mongodb-debuginfo | 0:2.4.6-2.el6sat |
| Red Hat satellite 6.0 | mongodb-debuginfo | 0:2.4.9-3.el7sat |
| Red Hat satellite 6.0 | mongodb-server | 0:2.4.9-3.el7sat |
| Red Hat satellite 6.0 | mongodb-server | 0:2.4.6-2.el6sat |
| Red Hat satellite 6.0 | python-anyjson | 0:0.3.3-5.el7sat |
| Red Hat satellite 6.0 | python-anyjson | 0:0.3.3-4.el6sat |
| Red Hat satellite 6.0 | python-httplib2 | 0:0.7.2-1.el6 |
| Red Hat satellite 6.0 | python-httplib2 | 0:0.6.0-6.el7sat |
| Red Hat satellite 6.0 | python-simplejson | 0:3.2.0-1.el7sat |
| Red Hat satellite 6.0 | python-simplejson-debuginfo | 0:3.2.0-1.el7sat |
| Red Hat satellite 6.0 | rubygem-hammer_cli_foreman | 0:0.1.1-16.el7sat |
| Red Hat satellite 6.0 | rubygem-hammer_cli_foreman | 0:0.1.1-16.el6sat |
| Red Hat satellite 6.0 | rubygem-hammer_cli_foreman_tasks | 0:0.0.3-3.el7sat |
| Red Hat satellite 6.0 | rubygem-hammer_cli_foreman_tasks | 0:0.0.3-3.el6sat |
| Red Hat satellite 6.0 | rubygem-kafo | 0:0.6.4-2.el6sat |
| Red Hat satellite 6.0 | rubygem-kafo | 0:0.6.4-2.el7sat |
| Red Hat satellite 6.0 | rubygem-kafo_parsers | 0:0.0.3-2.el6sat |
| Red Hat satellite 6.0 | rubygem-kafo_parsers | 0:0.0.3-2.el7sat |
| Red Hat satellite 6.0 | v8 | 1:3.14.5.10-11.el7sat |
| Red Hat satellite 6.0 | v8 | 1:3.14.5.10-9.el6sat |
| Red Hat satellite 6.0 | v8-debuginfo | 1:3.14.5.10-11.el7sat |
| Red Hat satellite 6.0 | v8-debuginfo | 1:3.14.5.10-9.el6sat |
| Red Hat satellite capsule 6.0 | foreman-proxy | 0:1.6.0.30-1.el6sat |
| Red Hat satellite capsule 6.0 | foreman-proxy | 0:1.6.0.30-1.el7sat |
| Red Hat satellite capsule 6.0 | libmongodb | 0:2.4.6-2.el6sat |
| Red Hat satellite capsule 6.0 | mongodb | 0:2.4.9-3.el7sat |
| Red Hat satellite capsule 6.0 | mongodb | 0:2.4.6-2.el6sat |
| Red Hat satellite capsule 6.0 | mongodb-debuginfo | 0:2.4.9-3.el7sat |
| Red Hat satellite capsule 6.0 | mongodb-debuginfo | 0:2.4.6-2.el6sat |
| Red Hat satellite capsule 6.0 | mongodb-server | 0:2.4.9-3.el7sat |
| Red Hat satellite capsule 6.0 | mongodb-server | 0:2.4.6-2.el6sat |
| Red Hat satellite capsule 6.0 | python-anyjson | 0:0.3.3-4.el6sat |
| Red Hat satellite capsule 6.0 | python-anyjson | 0:0.3.3-5.el7sat |
| Red Hat satellite capsule 6.0 | python-httplib2 | 0:0.6.0-6.el7sat |
| Red Hat satellite capsule 6.0 | python-httplib2 | 0:0.7.2-1.el6 |
| Red Hat satellite capsule 6.0 | python-simplejson | 0:3.2.0-1.el7sat |
| Red Hat satellite capsule 6.0 | python-simplejson-debuginfo | 0:3.2.0-1.el7sat |
| Red Hat satellite capsule 6.0 | rubygem-kafo | 0:0.6.4-2.el6sat |
| Red Hat satellite capsule 6.0 | rubygem-kafo | 0:0.6.4-2.el7sat |
| Red Hat satellite capsule 6.0 | rubygem-kafo_parsers | 0:0.0.3-2.el6sat |
| Red Hat satellite capsule 6.0 | rubygem-kafo_parsers | 0:0.0.3-2.el7sat |
| Red Hat satellite capsule 6.0 | v8 | 1:3.14.5.10-11.el7sat |
| Red Hat satellite capsule 6.0 | v8 | 1:3.14.5.10-9.el6sat |
| Red Hat satellite capsule 6.0 | v8-debuginfo | 1:3.14.5.10-11.el7sat |
| Red Hat satellite capsule 6.0 | v8-debuginfo | 1:3.14.5.10-9.el6sat |