CVE-2014-3590

CVE-2014-3590 describes a Cross-Site Request Forgery (CSRF) vulnerability in the logout function of Foreman, specifically as shipped with Red Hat Satellite 6. An attacker could force a user to log out by tricking them into viewing malicious content, as the system failed to validate CSRF tokens for this action. This vulnerability is rated Medium severity with a CVSS score of 6.5, indicating a network-based attack with low complexity that requires user interaction, leading to a high impact on availability (denial of service for the user). While it doesn't allow for data compromise, it can disrupt user sessions. There is no evidence of active exploitation, nor are there any public exploit modules or proof-of-concept codes available in Metasploit, Nuclei, or ExploitDB. The CVE has also received minimal community discussion and media coverage, suggesting a low level of public awareness or interest.