Back

HIGH

foreman: inspect in a provisioning template exposes sensitive controller information

Published May 20, 2016

Description

The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.

Affected products

Remediation

No remediation recorded yet.

Metrics

References (12)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published May 20, 2016
Updated Aug 6, 2024
Reserved Mar 30, 2016
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Apr 14, 2016
GHSA-C92M-RRRC-Q5WF