Vulnetix
Try Vulnetix Request Demo
CVE-2017-2667 PUBLISHED

Reported by redhat · Published March 12, 2018

Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.

Affected Products

VendorProductVersions
ForemanHammer CLI0.10.0
RubyGemshammer_cli_foreman0, 0
ForemanHammer CLI0.10.0, 0.10.0

Timeline

References

Open in Interactive Console →