CVE-2016-4995

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-19 · updated 2026-06-17
Weakness: CWE-200

Description

Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information via a URL with a hostname.

Affected products

foreman: from 1.11.0 before 1.11.4; from 1.12.0 before 1.12.1 — fixed in 1.11.4, 1.12.1

How to fix

Upgrade to a fixed version: foreman 1.11.4, 1.12.1. Check the vendor advisory for mitigations.

References

http://projects.theforeman.org/issues/15490
http://projects.theforeman.org/projects/foreman/repository/revisions/c3c186de12be15e55d9582e54659f765304a1073
https://access.redhat.com/errata/RHSA-2018:0336
https://theforeman.org/security.html#2016-4995
http://projects.theforeman.org/issues/15490
http://projects.theforeman.org/projects/foreman/repository/revisions/c3c186de12be15e55d9582e54659f765304a1073
https://access.redhat.com/errata/RHSA-2018:0336
https://theforeman.org/security.html#2016-4995

Get alerted when CVE-2016-4995 or the next vulnerability affects your stack