Description
Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-77h8-xr85-3x5q | hammer_cli_foreman Improper Certificate Validation vulnerability |
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-05T14:02:07.434Z
Reserved: 2016-12-01T00:00:00.000Z
Link: CVE-2017-2667
No data.
Status : Modified
Published: 2018-03-12T15:29:00.617
Modified: 2024-11-21T03:23:56.323
Link: CVE-2017-2667
OpenCVE Enrichment
No data.
Github GHSA