Lucene search
K

CVE-2014-0007

🗓️ 20 Jun 2014 14:00:00Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 73 Views🌐 WEB

The Smart-Proxy in Foreman allows remote attackers to execute arbitrary commands via shell metacharacters

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2014-0007
5 Jun 201400:00
circl
Cvelist
CVE-2014-0007
20 Jun 201414:00
cvelist
EUVD
EUVD-2014-0111
7 Oct 202500:30
euvd
Tenable Nessus
Foreman Smart-Proxy TFTP Remote Command Injection
17 Jul 201400:00
nessus
Tenable Nessus
RHEL 6 : foreman-proxy (RHSA-2014:0770)
24 Apr 202400:00
nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2014-0007
4 Mar 202500:00
nessus
NVD
CVE-2014-0007
20 Jun 201414:55
nvd
OSV
RHEA-2014:1175 Red Hat Enhancement Advisory: Release of Satellite 6.0
15 Sep 202421:58
osv
OSV
RHSA-2014:0770 Red Hat Security Advisory: foreman-proxy security update
15 Sep 202421:46
osv
Prion
Design/Logic Flaw
20 Jun 201414:55
prion
Rows per page
NVD
Node
theforemanforemanRange1.4.4
OROROROROR
ParameterPositionPathDescriptionCWE
pathpath/tftp/fetch_boot_fileRemote command execution via shell metacharacters in the path parameter to tftp/fetch_boot_file in Foreman Smart-Proxy (vulnerable before 1.4.5 and 1.5.x before 1.5.1).CWE-77

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

06 May 2026 22:30Current
7.8High risk
Vulners AI Score7.8
CVSS 27.5
EPSS0.06395
73