Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-3589

Fixed upstream EPSS 1%

An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Published 2022-03-23 · CVE record · OSV

Products: theforeman foreman_ansible, redhat satellite

Fixed upstream

EcosystemPackageFixed in
RubyGemsforeman_ansible2.0.0