The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors involving the password lifetime period in Active Directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Foreman | Theforeman | 1.9.0 (including) | 1.9.0 (including) |