CVE-2013-0174: Theforeman Foreman

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The external node classifier (ENC) API in Foreman before 1.1 allows remote attackers to obtain the hashed root password via an API request.

Affected products

• Theforeman Foreman: up to and including 1.0

Published 2014-05-08. Last modified 2026-06-16.