Project

General

Profile

Actions
Copy link

Bug #7378

closed

foreman api v2, GET to /api/v2/puppetclasses/foo/smart_class_parameters returns ALL smart class parameters for all puppet classes, if foo is not a valid puppet class

Added by Petter Hassberg over 10 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Martin Bacovsky
Category:
API
Target version:
1.8.0
Difficulty:
Triaged:
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman/pull/1835
Fixed in Releases:
Found in Releases:
1.5.2
Red Hat JIRA:

Description

When doing an API GET request to /api/v2/puppetclasses/foo it returns a 404 unless there is a puppet class named foo.

If however, the get request is as follows /api/v2/puppetclasses/foo/smart_class_parameters, if foo is not a puppet class, it will list all the smart class parameters for all puppet classes.

this can be I think dangerous.

Actions
Copy link

Also available in: Atom PDF