CVE Feed

    Dashboard / CVE / CVE-2015-5246

    CVE-2015-5246

    The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors involving the password lifetime period in Active Directory.

    Published:Aug 24, 2015
    Last Modified:Apr 20, 2025
    EPS:Oct 6, 2017
    EPSS Score:0.00655
    CVSS Score:8.1

    Affected Products

    Vendor
    Theforeman
    Product
    Foreman

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-5135 (CVSS 6.5) — A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-e…
    CVE-2025-9572 (CVSS 5) — n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assi…
    CVE-2024-7700 (CVSS 6.5) — A command injection flaw was found in the "Host Init Config" template in the Foreman application via the "Inst…
    CVE-2023-4886 (CVSS 6.7) — A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, whi…
    CVE-2022-3874 (CVSS 8) — A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on…
    CVE-2023-0462 (CVSS 8) — An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary…
    CVE-2023-0118 (CVSS 9.1) — An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in t…
    CVE-2020-10710 (CVSS 4.4) — A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through …
    CVE-2021-3584 (CVSS 7.2) — A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could…
    CVE-2021-3590 (CVSS 8.8) — A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High