CVE-2017-2667

State: Published
Severity: Not scored
Published: Mar 12, 2018
Updated: Aug 5, 2024
Reserved: Dec 1, 2016

Description

Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.

Scores

The record has no CVSS score.

Weaknesses

CWE-345

Affected Products

Product	Versions
Hammer CLIForeman	0.10.0Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1436262
RHSA-2018:0336vendor-advisory
http://projects.theforeman.org/issues/19033
97153vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.