CVE-2017-2667

CVE-2017-2667 details (Mode C): Hammer CLI (Foreman) before version 0.10.0 does not explicitly enable SSL certificate verification for apipie-bindings, which disables verify_ssl by default. This can cause server certificates to be unchecked and enable MITM attacks. Affected component: Hammer CLI ...

CVE-2014-0241

CVE-2014-0241 concerns rubygem-hammer_cli_foreman where the file /etc/hammer/cli.modules.d/foreman.yml is world-readable, enabling a local user to read potentially sensitive configuration data (e.g., usernames or passwords) as the underlying issue. Public sources in the provided documents corrobo...