Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-5152
4.3
MEDIUMCVSS v2
Published
July 17, 2017
Affected
6 projects
Assigned by
Red Hat
Severity scale
010
Description
Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack.
foreman
NPMNode Implementation of Foreman
NPMNode Implementation of Foreman= 1.4.1, = 1.3.0, = 1.4.3, = 1.2.2, = 1.4.0, = 1.2.1, = 1.8.0, = 1.7.4, = 1.8.1, = 1.1-1, = 1.4.2, = 1.6.0, = 1.8.3, = 1.7.0, = 1.5.2, = 1.2.0, = 1.7.5, = 1.5.0, = 1.5.1, = 1.7.1, = 1.2.3, = 1.5.3, = 1.7.2, = 1.3.2, = 1.3.1, = 1.4.4, = 1.4.5, = 1.8.2, = 1.7.3, = 1.6.1NVD
theforeman/foreman
GitHuban application that automates the lifecycle of servers
GitHuban application that automates the lifecycle of servers = 1.4.1, = 1.3.0, = 1.4.3, = 1.2.2, = 1.4.0, = 1.2.1, = 1.8.0, = 1.7.4, = 1.8.1, = 1.1-1, = 1.4.2, = 1.6.0, = 1.8.3, = 1.7.0, = 1.5.2, = 1.2.0, = 1.7.5, = 1.5.0, = 1.5.1, = 1.7.1, = 1.2.3, = 1.5.3, = 1.7.2, = 1.3.2, = 1.3.1, = 1.4.4, = 1.4.5, = 1.8.2, = 1.7.3, = 1.6.1NVD
Crates.io
RubyGems