CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-2667

Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.7%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 6.8

References

Products affected by CVE-2017-2667

Redhat » Satellite » Version: 6.3

cpe:2.3:a:redhat:satellite:6.3
Redhat » Satellite Capsule » Version: 6.3

cpe:2.3:a:redhat:satellite_capsule:6.3
Theforeman » Hammer Cli » Version: N/A

cpe:2.3:a:theforeman:hammer_cli:-
Theforeman » Hammer Cli » Version: 0.0.10

cpe:2.3:a:theforeman:hammer_cli:0.0.10
Theforeman » Hammer Cli » Version: 0.0.11

cpe:2.3:a:theforeman:hammer_cli:0.0.11
Theforeman » Hammer Cli » Version: 0.0.12

cpe:2.3:a:theforeman:hammer_cli:0.0.12
Theforeman » Hammer Cli » Version: 0.0.13

cpe:2.3:a:theforeman:hammer_cli:0.0.13
Theforeman » Hammer Cli » Version: 0.0.14

cpe:2.3:a:theforeman:hammer_cli:0.0.14
Theforeman » Hammer Cli » Version: 0.0.15

cpe:2.3:a:theforeman:hammer_cli:0.0.15
Theforeman » Hammer Cli » Version: 0.0.16

cpe:2.3:a:theforeman:hammer_cli:0.0.16
Theforeman » Hammer Cli » Version: 0.0.17

cpe:2.3:a:theforeman:hammer_cli:0.0.17
Theforeman » Hammer Cli » Version: 0.0.18

cpe:2.3:a:theforeman:hammer_cli:0.0.18
Theforeman » Hammer Cli » Version: 0.0.2

cpe:2.3:a:theforeman:hammer_cli:0.0.2
Theforeman » Hammer Cli » Version: 0.0.3

cpe:2.3:a:theforeman:hammer_cli:0.0.3
Theforeman » Hammer Cli » Version: 0.0.5

cpe:2.3:a:theforeman:hammer_cli:0.0.5
Theforeman » Hammer Cli » Version: 0.0.6

cpe:2.3:a:theforeman:hammer_cli:0.0.6
Theforeman » Hammer Cli » Version: 0.0.7

cpe:2.3:a:theforeman:hammer_cli:0.0.7
Theforeman » Hammer Cli » Version: 0.0.8

cpe:2.3:a:theforeman:hammer_cli:0.0.8
Theforeman » Hammer Cli » Version: 0.0.9

cpe:2.3:a:theforeman:hammer_cli:0.0.9
Theforeman » Hammer Cli » Version: 0.1.0

cpe:2.3:a:theforeman:hammer_cli:0.1.0
Theforeman » Hammer Cli » Version: 0.1.1

cpe:2.3:a:theforeman:hammer_cli:0.1.1
Theforeman » Hammer Cli » Version: 0.1.2

cpe:2.3:a:theforeman:hammer_cli:0.1.2
Theforeman » Hammer Cli » Version: 0.1.3

cpe:2.3:a:theforeman:hammer_cli:0.1.3
Theforeman » Hammer Cli » Version: 0.1.4

cpe:2.3:a:theforeman:hammer_cli:0.1.4
Theforeman » Hammer Cli » Version: 0.2.0

cpe:2.3:a:theforeman:hammer_cli:0.2.0
Theforeman » Hammer Cli » Version: 0.3.0

cpe:2.3:a:theforeman:hammer_cli:0.3.0
Theforeman » Hammer Cli » Version: 0.4.0

cpe:2.3:a:theforeman:hammer_cli:0.4.0
Theforeman » Hammer Cli » Version: 0.5.0

cpe:2.3:a:theforeman:hammer_cli:0.5.0
Theforeman » Hammer Cli » Version: 0.5.1

cpe:2.3:a:theforeman:hammer_cli:0.5.1
Theforeman » Hammer Cli » Version: 0.6.0

cpe:2.3:a:theforeman:hammer_cli:0.6.0
Theforeman » Hammer Cli » Version: 0.6.1

cpe:2.3:a:theforeman:hammer_cli:0.6.1
Theforeman » Hammer Cli » Version: 0.6.2

cpe:2.3:a:theforeman:hammer_cli:0.6.2
Theforeman » Hammer Cli » Version: 0.7.0

cpe:2.3:a:theforeman:hammer_cli:0.7.0
Theforeman » Hammer Cli » Version: 0.8.0

cpe:2.3:a:theforeman:hammer_cli:0.8.0
Theforeman » Hammer Cli » Version: 0.9.0

cpe:2.3:a:theforeman:hammer_cli:0.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-2667

Products

Pricing

Contact Us