Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2014-3691

foreman-proxy: failure to verify SSL certificates

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Redhat Theforeman
Products
Openstack Openstack-installer Satellite and 2 more
CVE-2015-1842

openstack-puppet-modules: pacemaker configured with default password

The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.2% KEV · Not listed
Vendors
Redhat
Products
Openstack Openstack-installer