The Foreman Project

Records108All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high36CVSS 7.0–8.9

Exploited now

The Foreman Project records in CISA KEV

No The Foreman Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Foreman 86 records HIGH Katello 10 records MEDIUM Foreman Ansible 2 records LOW Hammer Cli 2 records LOW Foreman-tasks 1 record LOW Foreman Azurerm 1 record LOW Foremanfogproxmox 1 record LOW Kafo 1 record LOW

Records

2 records in Hammer Cli · all components

TI-2017-01913 CVE-2017-2667 · GHSA-77h8-xr85-3x5q

Insufficient verification of data authenticity in Foreman Project Hammer CLI

LOW 36

Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00692 Published 2018-03-12 Partial fix · 0.10.0 CWE-345

TI-2014-00233 CVE-2014-0241 · GHSA-h459-7mrx-8pvc

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

LOW 25

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00308 Published 2019-12-13 Fixed CWE-522

Open these records in search →

Critical	6
High	36
Medium	63
Low	3
No CVSS	0