CVE-2018-1096

2018-04-0521:29:01

CWE-89

web.nvd.nist.gov

cve-2018-1096

input sanitization

foreman

sql injection

dashboard controller

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.6%

CPENameOperatorVersion
theforeman:foremantheforeman foremanlt1.16.1
redhat:satelliteredhat satelliteeq6.4

CPE	Name	Operator	Version
theforeman:foreman	theforeman foreman	lt	1.16.1
redhat:satellite	redhat satellite	eq	6.4

References

projects.theforeman.org/issues/23028

access.redhat.com/errata/RHSA-2018:2927

bugzilla.redhat.com/show_bug.cgi?id=1561061