Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-2667

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-77h8-xr85-3x5q

hammer_cli_foreman Improper Certificate Validation vulnerability Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.

gitlab/gem/hammer_cli_foreman/CVE-2017-2667

Improper Certificate Validation Hammer CLI, a CLI utility for Foreman, does not explicitly set the `verify_ssl` flag for `apipie-bindings`. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.