CVE-2018-1096
05.04.2018, 21:29
An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.
| Vendor | Product | Version |
|---|---|---|
| theforeman | foreman | 𝑥 < 1.16.1 |
| redhat | satellite | 6.4 |
𝑥
= Vulnerable software versions