theforeman/smart-proxy

theforeman/smart-proxy

Releases307

Frequency2 weeks 4 days

Last Release 12 days ago

Stars229

RESTful proxies for DNS, DHCP, TFTP, BMC and Puppet

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2016-3728 ↗	May 20, 2016Friday, 20 May 2016, 14:59	—	6.8 MEDIUM
Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.
CVE-2014-3691 ↗	Mar 9, 2015Monday, 9 March 2015, 14:59	—	7.5 HIGH
Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.