Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.
History

Sun, 08 Dec 2024 13:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat satellite Capsule
CPEs cpe:/a:redhat:satellite:6.1::el6
cpe:/a:redhat:satellite_capsule:6.1::el6
Vendors & Products Redhat satellite Capsule

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2020-01-02T19:52:06

Updated: 2024-08-06T10:50:17.612Z

Reserved: 2014-05-14T00:00:00

Link: CVE-2014-3590

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-01-02T20:15:19.007

Modified: 2024-11-21T02:08:27.733

Link: CVE-2014-3590

cve-icon Redhat

Severity : Low

Publid Date: 2014-08-08T00:00:00Z

Links: CVE-2014-3590 - Bugzilla