Security Advisory
CVE-2013-0210
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands.