{"action":"Upgrade foreman_ansible to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"foreman_ansible","cve_ids":["CVE-2021-3589"],"ecosystem":"RubyGems","epss":0.01047,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-vvff-6wrr-4g7q","id":"tcs_01M5KENPF6HV7JPQ4AWAXTFQ5D","modified_at":"2023-11-08T04:06:10.682185Z","published_at":"2022-03-24T00:00:17Z","references":["https://osv.dev/vulnerability/GHSA-vvff-6wrr-4g7q","https://nvd.nist.gov/vuln/detail/CVE-2021-3589","https://github.com/theforeman/foreman_ansible/commit/a5e0827bc3ec6c8ab82f968907857a15646305d5","https://access.redhat.com/security/cve/CVE-2021-3589","https://bugzilla.redhat.com/show_bug.cgi?id=1969265","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/foreman_ansible/CVE-2021-3589.yml","https://github.com/theforeman/foreman_ansible"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-vvff-6wrr-4g7q","url":"https://osv.dev/vulnerability/GHSA-vvff-6wrr-4g7q"}],"summary":"Missing Authentication for Critical Function in Foreman Ansible"}