CVE-2014-3691
Fixed in a distro release EPSS 2%
Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.
Products: redhat openstack, theforeman foreman
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack-installer 5 | foreman-proxy | 0:1.6.0.33-2.el6ost |
| Red Hat openstack 4 | foreman-proxy | 0:1.3.0-7.el6ost |
| Red Hat satellite 6.0 | foreman | 0:1.6.0.51-1.el6sat |
| Red Hat satellite 6.0 | foreman | 0:1.6.0.51-1.el7sat |
| Red Hat satellite 6.0 | foreman-compute | 0:1.6.0.51-1.el7sat |
| Red Hat satellite 6.0 | foreman-compute | 0:1.6.0.51-1.el6sat |
| Red Hat satellite 6.0 | foreman-gce | 0:1.6.0.51-1.el7sat |
| Red Hat satellite 6.0 | foreman-gce | 0:1.6.0.51-1.el6sat |
| Red Hat satellite 6.0 | foreman-libvirt | 0:1.6.0.51-1.el7sat |
| Red Hat satellite 6.0 | foreman-libvirt | 0:1.6.0.51-1.el6sat |
| Red Hat satellite 6.0 | foreman-ovirt | 0:1.6.0.51-1.el7sat |
| Red Hat satellite 6.0 | foreman-ovirt | 0:1.6.0.51-1.el6sat |
| Red Hat satellite 6.0 | foreman-postgresql | 0:1.6.0.51-1.el7sat |
| Red Hat satellite 6.0 | foreman-postgresql | 0:1.6.0.51-1.el6sat |
| Red Hat satellite 6.0 | foreman-proxy | 0:1.6.0.33-1.el6sat |
| Red Hat satellite 6.0 | foreman-proxy | 0:1.6.0.33-1.el7sat |
| Red Hat satellite 6.0 | foreman-vmware | 0:1.6.0.51-1.el6sat |
| Red Hat satellite 6.0 | foreman-vmware | 0:1.6.0.51-1.el7sat |
| Red Hat satellite 6.0 | katello-agent | 0:1.5.3-7.el6sat |
| Red Hat satellite 6.0 | katello-agent | 0:1.5.3-7.el7sat |
| Red Hat satellite 6.0 | katello-installer | 0:0.0.67-1.el7sat |
| Red Hat satellite 6.0 | katello-installer | 0:0.0.67-1.el6sat |
| Red Hat satellite 6.0 | pulp | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-admin-client | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-admin-client | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp-nodes | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp-nodes | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-nodes-child | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp-nodes-child | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-nodes-common | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp-nodes-common | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-nodes-parent | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp-nodes-parent | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-puppet | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-puppet | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp-puppet-admin-extensions | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-puppet-admin-extensions | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp-puppet-plugins | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-puppet-plugins | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp-puppet-tools | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp-puppet-tools | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-rpm | 0:2.4.4-1.1.el7sat |
| Red Hat satellite 6.0 | pulp-rpm | 0:2.4.4-1.1.el6sat |
| Red Hat satellite 6.0 | pulp-rpm-admin-extensions | 0:2.4.4-1.1.el7sat |
| Red Hat satellite 6.0 | pulp-rpm-admin-extensions | 0:2.4.4-1.1.el6sat |
| Red Hat satellite 6.0 | pulp-rpm-handlers | 0:2.4.4-1.1.el6sat |
| Red Hat satellite 6.0 | pulp-rpm-handlers | 0:2.4.4-1.1.el7sat |
| Red Hat satellite 6.0 | pulp-rpm-plugins | 0:2.4.4-1.1.el7sat |
| Red Hat satellite 6.0 | pulp-rpm-plugins | 0:2.4.4-1.1.el6sat |
| Red Hat satellite 6.0 | pulp-selinux | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | pulp-selinux | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-server | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | pulp-server | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | python-pulp-agent-lib | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | python-pulp-agent-lib | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | python-pulp-bindings | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | python-pulp-bindings | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | python-pulp-client-lib | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | python-pulp-client-lib | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | python-pulp-common | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | python-pulp-common | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | python-pulp-puppet-common | 0:2.4.4-1.el7sat |
| Red Hat satellite 6.0 | python-pulp-puppet-common | 0:2.4.4-1.el6sat |
| Red Hat satellite 6.0 | python-pulp-rpm-common | 0:2.4.4-1.1.el7sat |
| Red Hat satellite 6.0 | python-pulp-rpm-common | 0:2.4.4-1.1.el6sat |
| Red Hat satellite 6.0 | ruby193-rubygem-fog | 0:1.21.0-3.2.el7sat |
| Red Hat satellite 6.0 | ruby193-rubygem-fog | 0:1.21.0-3.2.el6sat |
| Red Hat satellite 6.0 | ruby193-rubygem-foreman-tasks | 0:0.6.9-1.2.el6sat |
| Red Hat satellite 6.0 | ruby193-rubygem-foreman-tasks | 0:0.6.9-1.2.el7sat |
| Red Hat satellite capsule 6.0 | foreman-proxy | 0:1.6.0.33-1.el7sat |
| Red Hat satellite capsule 6.0 | foreman-proxy | 0:1.6.0.33-1.el6sat |
| Red Hat satellite capsule 6.0 | katello-agent | 0:1.5.3-7.el7sat |
| Red Hat satellite capsule 6.0 | katello-agent | 0:1.5.3-7.el6sat |
| Red Hat satellite capsule 6.0 | katello-installer | 0:0.0.67-1.el6sat |
| Red Hat satellite capsule 6.0 | katello-installer | 0:0.0.67-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-admin-client | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-admin-client | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-nodes | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-nodes | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-nodes-child | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-nodes-child | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-nodes-common | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-nodes-common | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-nodes-parent | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-nodes-parent | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-puppet | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-puppet | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-puppet-admin-extensions | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-puppet-admin-extensions | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-puppet-plugins | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-puppet-plugins | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-rpm | 0:2.4.4-1.1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-rpm | 0:2.4.4-1.1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-rpm-admin-extensions | 0:2.4.4-1.1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-rpm-admin-extensions | 0:2.4.4-1.1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-rpm-handlers | 0:2.4.4-1.1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-rpm-handlers | 0:2.4.4-1.1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-rpm-plugins | 0:2.4.4-1.1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-rpm-plugins | 0:2.4.4-1.1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-selinux | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-selinux | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | pulp-server | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | pulp-server | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | python-pulp-agent-lib | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | python-pulp-agent-lib | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | python-pulp-bindings | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | python-pulp-bindings | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | python-pulp-client-lib | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | python-pulp-client-lib | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | python-pulp-common | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | python-pulp-common | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | python-pulp-puppet-common | 0:2.4.4-1.el7sat |
| Red Hat satellite capsule 6.0 | python-pulp-puppet-common | 0:2.4.4-1.el6sat |
| Red Hat satellite capsule 6.0 | python-pulp-rpm-common | 0:2.4.4-1.1.el7sat |
| Red Hat satellite capsule 6.0 | python-pulp-rpm-common | 0:2.4.4-1.1.el6sat |