Skip to content
OpenAdvisories

Vendor

Foreman

7 known vulnerabilities.

Products

foreman 5 Hammer CLI 1 katello-debug 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2016-9595

    A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A loc…

    Foreman katello-debug
  • High 8.1
    CVE-2017-2667

    hammer_cli_foreman Improper Certificate Validation vulnerability

    Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.

    Foreman Hammer CLI hammer_cli_foreman RubyGems