CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3691

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 56.9%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2014-3691

Redhat » Openstack » Version: 4.0

cpe:2.3:a:redhat:openstack:4.0
Redhat » Openstack » Version: 5.0

cpe:2.3:a:redhat:openstack:5.0
Theforeman » Foreman » Version: N/A

cpe:2.3:a:theforeman:foreman:-
Theforeman » Foreman » Version: 0.1

cpe:2.3:a:theforeman:foreman:0.1
Theforeman » Foreman » Version: 0.2

cpe:2.3:a:theforeman:foreman:0.2
Theforeman » Foreman » Version: 0.3

cpe:2.3:a:theforeman:foreman:0.3
Theforeman » Foreman » Version: 0.4

cpe:2.3:a:theforeman:foreman:0.4
Theforeman » Foreman » Version: 0.4.1

cpe:2.3:a:theforeman:foreman:0.4.1
Theforeman » Foreman » Version: 0.4.2

cpe:2.3:a:theforeman:foreman:0.4.2
Theforeman » Foreman » Version: 1.0

cpe:2.3:a:theforeman:foreman:1.0
Theforeman » Foreman » Version: 1.0.1

cpe:2.3:a:theforeman:foreman:1.0.1
Theforeman » Foreman » Version: 1.1

cpe:2.3:a:theforeman:foreman:1.1
Theforeman » Foreman » Version: 1.2.0

cpe:2.3:a:theforeman:foreman:1.2.0
Theforeman » Foreman » Version: 1.2.1

cpe:2.3:a:theforeman:foreman:1.2.1
Theforeman » Foreman » Version: 1.2.2

cpe:2.3:a:theforeman:foreman:1.2.2
Theforeman » Foreman » Version: 1.2.3

cpe:2.3:a:theforeman:foreman:1.2.3
Theforeman » Foreman » Version: 1.3.0

cpe:2.3:a:theforeman:foreman:1.3.0
Theforeman » Foreman » Version: 1.3.1

cpe:2.3:a:theforeman:foreman:1.3.1
Theforeman » Foreman » Version: 1.3.2

cpe:2.3:a:theforeman:foreman:1.3.2
Theforeman » Foreman » Version: 1.4.0

cpe:2.3:a:theforeman:foreman:1.4.0
Theforeman » Foreman » Version: 1.4.1

cpe:2.3:a:theforeman:foreman:1.4.1
Theforeman » Foreman » Version: 1.4.2

cpe:2.3:a:theforeman:foreman:1.4.2
Theforeman » Foreman » Version: 1.4.3

cpe:2.3:a:theforeman:foreman:1.4.3
Theforeman » Foreman » Version: 1.4.4

cpe:2.3:a:theforeman:foreman:1.4.4
Theforeman » Foreman » Version: 1.4.5

cpe:2.3:a:theforeman:foreman:1.4.5
Theforeman » Foreman » Version: 1.5.0

cpe:2.3:a:theforeman:foreman:1.5.0
Theforeman » Foreman » Version: 1.5.1

cpe:2.3:a:theforeman:foreman:1.5.1
Theforeman » Foreman » Version: 1.5.2

cpe:2.3:a:theforeman:foreman:1.5.2
Theforeman » Foreman » Version: 1.5.3

cpe:2.3:a:theforeman:foreman:1.5.3
Theforeman » Foreman » Version: 1.6.0

cpe:2.3:a:theforeman:foreman:1.6.0
Theforeman » Foreman » Version: 1.6.1

cpe:2.3:a:theforeman:foreman:1.6.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3691

Products

Pricing

Contact Us