The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service (memory consumption) via unspecified input that is converted to a symbol.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-4103
http://theforeman.org/manuals/1.2/index.html#Releasenotesfor1.2.2