Lucene search
Veracode Vulnerability DatabaseVERACODE:3840HistoryApr 05, 2017 - 2:06 a.m.
Unverified SSL Certificates
2017-04-0502:06:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.003 Low
EPSS
Percentile
70.8%
hammer_cli uses unverified SSL certificates by default. When hammer_cli initiates HTTPS connections using apipie-binding and rest-clients, it doesn’t verify that the SSL certificate is correct. This allows man-in-the-middle (MitM) attacks.
References
projects.theforeman.org/issues/19033
seclists.org/oss-sec/2017/q2/10
www.securityfocus.com/bid/97153
access.redhat.com/errata/RHSA-2018:0336
access.redhat.com/security/cve/CVE-2017-2667
bugzilla.redhat.com/show_bug.cgi?id=1436262
github.com/theforeman/hammer-cli/pull/235
projects.theforeman.org/issues/19033
Related
osv
osv
hammer_cli_foreman Improper Certificate Validation vulnerability
2022-05-13 01:36:51
CVE-2017-2667
2018-03-12 15:29:00
nessus
nessus
RHEL 7 : rubygem-hammer_cli (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 6 : rubygem-hammer_cli (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : rubygem-hammer_cli (Unpatched Vulnerability)
2024-06-03 00:00:00
nvd
nvd
CVE-2017-2667
2018-03-12 15:29:00
redhatcve
redhatcve
CVE-2017-2667
2019-10-12 00:50:37
cvelist
cvelist
CVE-2017-2667
2018-03-12 15:00:00
cve
cve
CVE-2017-2667
2018-03-12 15:29:00
prion
prion
Default configuration
2018-03-12 15:29:00
github
github
hammer_cli_foreman Improper Certificate Validation vulnerability
2022-05-13 01:36:51
redhat
redhat