Theforeman Hammer Cli vulnerabilities

2 vulnerabilities

Known vulnerabilities in Theforeman Hammer Cli, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2014-0241redhatsatellite+2
EPSS score
0.31%
rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable8.1CVE-2017-2667foremanhammer cli+4
EPSS score
0.69%
Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.