Red Hat Security Advisory

RHSA-2015:0287

foreman-proxy security update

Released 2015-03-03 · Red Hat rating Important · View on Red Hat →

Fixed in

OpenStack Foreman foreman-proxy-1.6.0.33-2.el6ost

Fixes 1 record

TI-2014-03007 CVE-2014-3691 · GHSA-m4h9-hcv2-hw6h

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before…

LOW 36

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01706 Published 2015-03-09 Fixed CWE-310