Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ddollar/foreman
main @ f65ddba
1
Fixes
50
CVEs
CRITICAL
Peak severity
Highlights
Information Disclosure: 1 prior fix. Scrutinize any change in this area.
data/export/upstart/process.conf.erb: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: Exporting upstart configurations using inline shell commands with environment variables exposes sensitive process arguments to local users via the process listing (ps) command. Resolving this required moving configuration values to native Upstart environment structures and utilizing native setuid.
Command Injection: Foreman's templating engines are historically prone to sandbox escapes and arbitrary shell command execution (such as CVE-2023-0118 and CVE-2022-3874) when transposing configurations or executing templates without adequate safemode enforcement.
Information Disclosure: Sensitive credentials, including Azure compute profile passwords and virtualization connection credentials, have been leaked to authenticated API consumers and log outputs due to lack of output filtering.