2 matches found
CVE-2015-5152
Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the requiressl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack...
8.1CVSS7.9AI score0.01514EPSS
SaveExploits0References2
Open redirect
Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the requiressl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack...
4.3CVSS7AI score0.01514EPSS
SaveExploits0References2Affected Software1
20