CVE-2014-3691

Published March 9th, 2015

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

theforeman/smart-proxy

RESTful proxies for DNS, DHCP, TFTP, BMC and Puppet

GitHub

229