CVE-2014-3691
09.03.2015, 14:59
Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | openstack | 4.0 |
| redhat | openstack | 5.0 |
| theforeman | foreman | 𝑥 ≤ 1.5.3 |
| theforeman | foreman | 1.6.0 |
| theforeman | foreman | 1.6.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References