Cloudanix VulnDB

CVE-2013-2121

None

CVSS

—

EPSS

24.8%

Published

Jul 31, 2013

CISA due date

—

The record

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.

Affected packages

Ecosystem Package Introduced Fixed
Red Hat:openstack:3::el6 ruby193-foreman 0 0:1.1.10009-3.el6ost
Red Hat:openstack:3::el6 ruby193-foreman-mysql 0 0:1.1.10009-3.el6ost
Red Hat:openstack:3::el6 ruby193-foreman-proxy 0 0:1.1.10001-4.el6ost
Red Hat:openstack:3::el6 ruby193-openstack-foreman-installer 0 0:0.0.18-1.el6ost
Red Hat:openstack:3::el6 ruby193-openstack-foreman-installer-debuginfo 0 0:0.0.18-1.el6ost
Red Hat:openstack:3::el6 ruby193-rubygem-ancestry 0 0:1.3.0-5.el6ost
Red Hat:openstack:3::el6 ruby193-rubygem-ancestry-doc 0 0:1.3.0-5.el6ost
Red Hat:openstack:3::el6 ruby193-rubygem-fog 0 0:1.10.1-11.el6ost
Red Hat:openstack:3::el6 ruby193-rubygem-fog-doc 0 0:1.10.1-11.el6ost
Red Hat:openstack:3::el6 ruby193-rubygem-mysql 0 0:2.8.1-4.el6ost
Red Hat:openstack:3::el6 ruby193-rubygem-mysql-debuginfo 0 0:2.8.1-4.el6ost
Red Hat:openstack:3::el6 ruby193-rubygem-safemode 0 0:1.2.0-9.el6ost
Red Hat:openstack:3::el6 ruby193-rubygem-safemode-doc 0 0:1.2.0-9.el6ost
Red Hat:satellite:6.0::el6 advancecomp 0 0:1.15-13.el6sat
Red Hat:satellite:6.0::el6 advancecomp-debuginfo 0 0:1.15-13.el6sat
Red Hat:satellite:6.0::el6 aopalliance 0 0:1.0-5.3.ep5.el6
Red Hat:satellite:6.0::el6 apache-commons-codec-eap6 0 0:1.4-16.redhat_3.1.ep6.el6
Red Hat:satellite:6.0::el6 apache-mime4j 0 0:0.6-4_redhat_1.ep6.el6.1
Red Hat:satellite:6.0::el6 atinject 0 0:1-8.2_redhat_1.ep6.el6.1
Red Hat:satellite:6.0::el6 bcmail 0 0:1.46-3.5_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 bcpg 0 0:1.46-3.5_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 bcprov 0 0:1.46-3.5_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 bctsp 0 0:1.46-3.5_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 bouncycastle 0 0:1.46-3.5_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 c3p0 0 0:0.9.1.2-2.ep5.el6
Red Hat:satellite:6.0::el6 candlepin 0 0:0.9.23-1.el6_5
Red Hat:satellite:6.0::el6 candlepin-common 0 0:1.0.1-1.el6_5
Red Hat:satellite:6.0::el6 candlepin-scl 0 0:1-5.el6_4
Red Hat:satellite:6.0::el6 candlepin-scl-quartz 0 0:2.1.5-5.el6_4
Red Hat:satellite:6.0::el6 candlepin-scl-rhino 0 0:1.7R3-1.el6_4
Red Hat:satellite:6.0::el6 candlepin-scl-runtime 0 0:1-5.el6_4
Red Hat:satellite:6.0::el6 candlepin-selinux 0 0:0.9.23-1.el6_5
Red Hat:satellite:6.0::el6 candlepin-tomcat6 0 0:0.9.23-1.el6_5
Red Hat:satellite:6.0::el6 createrepo 0 0:0.9.9-21.2.pulp.el6sat
Red Hat:satellite:6.0::el6 dom4j 0 0:1.6.1-11.8_redhat_1.ep6.el6.1
Red Hat:satellite:6.0::el6 elasticsearch 0 0:0.90.10-6.el6sat
Red Hat:satellite:6.0::el6 facter 0 1:1.7.6-2.el6sat
Red Hat:satellite:6.0::el6 facter-debuginfo 0 1:1.7.6-2.el6sat
Red Hat:satellite:6.0::el6 fasterxml-oss-parent 0 0:11-2.ep6.el6
Red Hat:satellite:6.0::el6 foreman 0 0:1.6.0.44-1.el6sat
Red Hat:satellite:6.0::el6 foreman-compute 0 0:1.6.0.44-1.el6sat
Red Hat:satellite:6.0::el6 foreman-discovery-image 0 0:6.5-20140620.2.el6sat
Red Hat:satellite:6.0::el6 foreman-gce 0 0:1.6.0.44-1.el6sat
Red Hat:satellite:6.0::el6 foreman-libvirt 0 0:1.6.0.44-1.el6sat
Red Hat:satellite:6.0::el6 foreman-ovirt 0 0:1.6.0.44-1.el6sat
Red Hat:satellite:6.0::el6 foreman-postgresql 0 0:1.6.0.44-1.el6sat
Red Hat:satellite:6.0::el6 foreman-proxy 0 0:1.6.0.30-1.el6sat
Red Hat:satellite:6.0::el6 foreman-selinux 0 0:1.6.0.14-1.el6sat
Red Hat:satellite:6.0::el6 foreman-vmware 0 0:1.6.0.44-1.el6sat
Red Hat:satellite:6.0::el6 gettext-commons 0 0:0.9.6-6.el6_2
Red Hat:satellite:6.0::el6 glassfish-jaf 0 0:1.1.1-9_redhat_1.ep6.el6.1
Red Hat:satellite:6.0::el6 glassfish-javamail 0 0:1.4.4-6_redhat_1.ep6.el6.1
Red Hat:satellite:6.0::el6 glassfish-jaxb 0 0:2.2.5-19.redhat_7.2.ep6.el6
Red Hat:satellite:6.0::el6 gofer 0 0:1.3.0-1.el6sat
Red Hat:satellite:6.0::el6 google-collections 0 0:1.0-3.3.ep6.el6
Red Hat:satellite:6.0::el6 google-guice 0 0:3.0-2_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 gperftools 0 0:2.0-3.el6sat.2
Red Hat:satellite:6.0::el6 gperftools-debuginfo 0 0:2.0-3.el6sat.2
Red Hat:satellite:6.0::el6 gperftools-libs 0 0:2.0-3.el6sat.2
Red Hat:satellite:6.0::el6 hibernate-beanvalidation-api 0 0:1.0.0-4.7.GA_redhat_2.ep6.el6.3
Red Hat:satellite:6.0::el6 hibernate-jpa-2.0-api 0 0:1.0.1-5.Final_redhat_2.1.ep6.el6.4
Red Hat:satellite:6.0::el6 hibernate3-commons-annotations 0 0:4.0.1-2.Final_redhat_1.1.ep6.el6
Red Hat:satellite:6.0::el6 hibernate4 0 0:4.2.5-1.Final_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 hibernate4-c3p0 0 0:4.2.5-1.Final_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 hibernate4-core 0 0:4.2.5-1.Final_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 hibernate4-entitymanager 0 0:4.2.5-1.Final_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 hibernate4-validator 0 0:4.3.1-2.Final_redhat_1.1.ep6.el6
Red Hat:satellite:6.0::el6 hiera 0 0:1.0.0-3.el6_4
Red Hat:satellite:6.0::el6 hornetq 0 0:2.3.5-2.Final_redhat_2.1.ep6.el6
Red Hat:satellite:6.0::el6 httpclient 0 0:4.2.1-9.redhat_1.3.ep6.el6
Red Hat:satellite:6.0::el6 httpcomponents 0 0:6-9.redhat_1.3.ep6.el6
Red Hat:satellite:6.0::el6 httpcomponents-client 0 0:4.2.1-9.redhat_1.3.ep6.el6
Red Hat:satellite:6.0::el6 httpcomponents-core 0 0:4.2.1-9.redhat_1.3.ep6.el6
Red Hat:satellite:6.0::el6 httpcomponents-project 0 0:6-9.redhat_1.3.ep6.el6
Red Hat:satellite:6.0::el6 httpcore 0 0:4.2.1-9.redhat_1.3.ep6.el6
Red Hat:satellite:6.0::el6 ipxe 0 0:20130517-7.1fm.gitc4bce43.el6sat
Red Hat:satellite:6.0::el6 ipxe-bootimgs 0 0:20130517-7.1fm.gitc4bce43.el6sat
Red Hat:satellite:6.0::el6 istack-commons 0 1:2.6.1-9_redhat_2.ep6.el6
Red Hat:satellite:6.0::el6 istack-commons-runtime 0 1:2.6.1-9_redhat_2.ep6.el6
Red Hat:satellite:6.0::el6 jackson-annotations 0 0:2.3.0-3.ep6.el6
Red Hat:satellite:6.0::el6 jackson-core 0 0:2.3.0-1.ep6.el6
Red Hat:satellite:6.0::el6 jackson-databind 0 0:2.3.0-2.ep6.el6
Red Hat:satellite:6.0::el6 jackson-datatype-hibernate 0 0:2.3.0-1.ep6.el6
Red Hat:satellite:6.0::el6 jackson-datatype-hibernate-parent 0 0:2.3.0-1.ep6.el6
Red Hat:satellite:6.0::el6 jackson-datatype-hibernate4 0 0:2.3.0-1.ep6.el6
Red Hat:satellite:6.0::el6 jackson-jaxrs-base 0 0:2.3.0-3.ep6.el6
Red Hat:satellite:6.0::el6 jackson-jaxrs-json-provider 0 0:2.3.0-3.ep6.el6
Red Hat:satellite:6.0::el6 jackson-jaxrs-providers 0 0:2.3.0-3.ep6.el6
Red Hat:satellite:6.0::el6 jackson-module-jaxb-annotations 0 0:2.3.0-2.ep6.el6
Red Hat:satellite:6.0::el6 javassist 0 0:3.12.1-1.ep6.el6
Red Hat:satellite:6.0::el6 jaxb-impl 0 0:2.2.5-19.redhat_7.2.ep6.el6
Red Hat:satellite:6.0::el6 jaxb-project 0 0:2.2.5-19.redhat_7.2.ep6.el6
Red Hat:satellite:6.0::el6 jboss-common-core 0 0:2.2.17-4.GA_redhat_1.ep6.el6.1
Red Hat:satellite:6.0::el6 jboss-jaxb-api_2.2_spec 0 0:1.0.4-3.Final_redhat_2.1.ep6.el6.1
Red Hat:satellite:6.0::el6 jboss-logging 0 0:3.1.2-3.GA_redhat_1.ep6.el6
Red Hat:satellite:6.0::el6 jboss-specs-parent 0 0:1.0.0-1.Beta2_redhat_1.1.ep6.el6
Red Hat:satellite:6.0::el6 jboss-transaction-api_1.1_spec 0 0:1.0.1-6.Final_redhat_2.ep6.el6
Red Hat:satellite:6.0::el6 jbossts 0 1:4.16.2-1.Final.3.ep6.el6
Red Hat:satellite:6.0::el6 jcl-over-slf4j 0 0:1.7.5-4.ep6.el6
Red Hat:satellite:6.0::el6 jsr-311 0 0:1.1.1-4.ep6.el6
Red Hat:satellite:6.0::el6 jsr311-api 0 0:1.1.1-4.ep6.el6
Red Hat:satellite:6.0::el6 katello 0 0:1.5.0-30.el6sat
Red Hat:satellite:6.0::el6 katello-agent 0 0:1.5.3-5.el6sat
Red Hat:satellite:6.0::el6 katello-certs-tools 0 0:1.5.6-1.el6sat
Red Hat:satellite:6.0::el6 katello-installer 0 0:0.0.64-1.el6sat
Red Hat:satellite:6.0::el6 katello-utils 0 0:1.5.16-1.el6sat
Red Hat:satellite:6.0::el6 libipa_hbac 0 0:1.11.5.1-3.el6
Red Hat:satellite:6.0::el6 libipa_hbac-python 0 0:1.11.5.1-3.el6
Red Hat:satellite:6.0::el6 libmongodb 0 0:2.4.6-2.el6sat
Red Hat:satellite:6.0::el6 libsss_idmap 0 0:1.11.5.1-3.el6
Red Hat:satellite:6.0::el6 libsss_nss_idmap 0 0:1.11.5.1-3.el6
Red Hat:satellite:6.0::el6 libsss_nss_idmap-python 0 0:1.11.5.1-3.el6
Red Hat:satellite:6.0::el6 liquibase 0 0:2.0.5-2.el6sat
Red Hat:satellite:6.0::el6 livecd-tools 0 1:13.4.1-2.el6sat
Red Hat:satellite:6.0::el6 logback 0 0:1.0.13-3.ep6.el6
Red Hat:satellite:6.0::el6 logback-classic 0 0:1.0.13-3.ep6.el6
Red Hat:satellite:6.0::el6 logback-core 0 0:1.0.13-3.ep6.el6
Red Hat:satellite:6.0::el6 logback-parent 0 0:1.0.13-3.ep6.el6
Red Hat:satellite:6.0::el6 lucene4 0 0:4.6.1-1.el6sat
Red Hat:satellite:6.0::el6 lucene4-contrib 0 0:4.6.1-1.el6sat
Red Hat:satellite:6.0::el6 mod_authnz_pam 0 0:0.9.2-1.el6
Red Hat:satellite:6.0::el6 mod_authnz_pam-debuginfo 0 0:0.9.2-1.el6
Red Hat:satellite:6.0::el6 mod_intercept_form_submit 0 0:0.9.7-1.el6
Red Hat:satellite:6.0::el6 mod_intercept_form_submit-debuginfo 0 0:0.9.7-1.el6
Red Hat:satellite:6.0::el6 mod_lookup_identity 0 0:0.9.1-1.el6
Red Hat:satellite:6.0::el6 mod_lookup_identity-debuginfo 0 0:0.9.1-1.el6
Red Hat:satellite:6.0::el6 mod_passenger 0 0:4.0.18-19.el6sat
Red Hat:satellite:6.0::el6 mod_wsgi 0 0:3.4-1.pulp.el6sat
Red Hat:satellite:6.0::el6 mod_wsgi-debuginfo 0 0:3.4-1.pulp.el6sat
Red Hat:satellite:6.0::el6 mongodb 0 0:2.4.6-2.el6sat
Red Hat:satellite:6.0::el6 mongodb-debuginfo 0 0:2.4.6-2.el6sat
Red Hat:satellite:6.0::el6 mongodb-server 0 0:2.4.6-2.el6sat
Red Hat:satellite:6.0::el6 netty 0 0:3.2.6-1_redhat_1.2.ep6.el6
Red Hat:satellite:6.0::el6 oauth 0 0:20100601-4.ep6.el6
Red Hat:satellite:6.0::el6 objectweb-asm 0 0:3.3.1-5_redhat_1.1.ep6.el6.1
Red Hat:satellite:6.0::el6 pulp 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-admin-client 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-katello 0 0:0.3-4.el6sat
Red Hat:satellite:6.0::el6 pulp-nodes 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-nodes-child 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-nodes-common 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-nodes-parent 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-puppet 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-puppet-admin-extensions 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-puppet-plugins 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-puppet-tools 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-rpm 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-rpm-admin-extensions 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-rpm-handlers 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-rpm-plugins 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-selinux 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 pulp-server 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 puppet 0 0:3.6.2-1.el6sat
Red Hat:satellite:6.0::el6 puppet-server 0 0:3.6.2-1.el6sat
Red Hat:satellite:6.0::el6 pyliblzma 0 0:0.5.3-3.el6sat
Red Hat:satellite:6.0::el6 pyliblzma-debuginfo 0 0:0.5.3-3.el6sat
Red Hat:satellite:6.0::el6 pyparsing 0 0:1.5.6-6.el6sat
Red Hat:satellite:6.0::el6 python-BeautifulSoup 0 1:3.0.8.1-1.el6sat
Red Hat:satellite:6.0::el6 python-amqp 0 0:1.4.5-1.el6sat
Red Hat:satellite:6.0::el6 python-anyjson 0 0:0.3.3-4.el6sat
Red Hat:satellite:6.0::el6 python-billiard 0 1:3.3.0.17-1.el6sat
Red Hat:satellite:6.0::el6 python-billiard-debuginfo 0 1:3.3.0.17-1.el6sat
Red Hat:satellite:6.0::el6 python-bson 0 0:2.5.2-3.el6sat
Red Hat:satellite:6.0::el6 python-celery 0 0:3.1.11-1.el6sat
Red Hat:satellite:6.0::el6 python-cherrypy 0 0:3.2.2-3.el6sat
Red Hat:satellite:6.0::el6 python-gofer 0 0:1.3.0-1.el6sat
Red Hat:satellite:6.0::el6 python-gofer-qpid 0 0:1.3.0-1.el6sat
Red Hat:satellite:6.0::el6 python-httplib2 0 0:0.7.2-1.el6
Red Hat:satellite:6.0::el6 python-imgcreate 0 1:13.4.1-2.el6sat
Red Hat:satellite:6.0::el6 python-importlib 0 0:1.0.2-1.el6sat
Red Hat:satellite:6.0::el6 python-isodate 0 0:0.5.0-1.pulp.el6sat
Red Hat:satellite:6.0::el6 python-kombu 0 1:3.0.15-12.pulp.el6sat
Red Hat:satellite:6.0::el6 python-nectar 0 0:1.3.1-1.el6sat
Red Hat:satellite:6.0::el6 python-oauth2 0 0:1.5.211-5.el6sat
Red Hat:satellite:6.0::el6 python-okaara 0 0:1.0.32-1.el6sat
Red Hat:satellite:6.0::el6 python-ordereddict 0 0:1.1-3.el6sat
Red Hat:satellite:6.0::el6 python-pulp-agent-lib 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 python-pulp-bindings 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 python-pulp-client-lib 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 python-pulp-common 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 python-pulp-puppet-common 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 python-pulp-rpm-common 0 0:2.4.1-0.7.beta.el6sat
Red Hat:satellite:6.0::el6 python-pymongo 0 0:2.5.2-3.el6sat
Red Hat:satellite:6.0::el6 python-pymongo-debuginfo 0 0:2.5.2-3.el6sat
Red Hat:satellite:6.0::el6 python-qpid 0 0:0.22-14.el6sat
Red Hat:satellite:6.0::el6 python-qpid-qmf 0 0:0.22-37.el6
Red Hat:satellite:6.0::el6 python-requests 0 0:2.2.1-1.el6sat
Red Hat:satellite:6.0::el6 python-rhsm 0 0:1.12.5-1.el6
Red Hat:satellite:6.0::el6 python-rhsm-debuginfo 0 0:1.12.5-1.el6
Red Hat:satellite:6.0::el6 python-saslwrapper 0 0:0.22-5.el6sat
Red Hat:satellite:6.0::el6 python-semantic-version 0 0:2.2.0-3.el6sat
Red Hat:satellite:6.0::el6 python-sssdconfig 0 0:1.11.5.1-3.el6
Red Hat:satellite:6.0::el6 python-webpy 0 0:0.37-3.el6sat
Red Hat:satellite:6.0::el6 qpid-cpp 0 0:0.22-42.el6
Red Hat:satellite:6.0::el6 qpid-cpp-client 0 0:0.22-42.el6
Red Hat:satellite:6.0::el6 qpid-cpp-debuginfo 0 0:0.22-42.el6
Red Hat:satellite:6.0::el6 qpid-cpp-server 0 0:0.22-42.el6
Red Hat:satellite:6.0::el6 qpid-cpp-server-linearstore 0 0:0.22-42.el6
Red Hat:satellite:6.0::el6 qpid-java 0 0:0.22-6.el6
Red Hat:satellite:6.0::el6 qpid-java-client 0 0:0.22-6.el6

Related vulnerabilities