CVE-2017-2667

2018-03-1215:29:00

Google

osv.dev

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%

JSON

Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.

CPENameOperatorVersion
hammer-clieq0.0.12
hammer-clieq0.7.0
hammer-clieq0.1.2
hammer-clieq0.5.1
hammer-clieq0.6.0
hammer-clieq0.8.0
hammer-clieq0.0.16
hammer-clieq0.0.17
hammer-clieq0.0.7
hammer-clieq0.4.0

Name	Operator	Version
hammer-cli	eq	0.0.12
hammer-cli	eq	0.7.0
hammer-cli	eq	0.1.2
hammer-cli	eq	0.5.1
hammer-cli	eq	0.6.0
hammer-cli	eq	0.8.0
hammer-cli	eq	0.0.16
hammer-cli	eq	0.0.17
hammer-cli	eq	0.0.7
hammer-cli	eq	0.4.0