CVE-2018-14643: theforeman foreman DEPRECATED: Authentication Bypass Issues
CVSS: 10.0v2.0HighModified
AliasesRHSA-2018:2733GHSA-gx5g-xcxj-cx2w
Published 21-09-2018Last modified 05-08-2024
Vulnerability summary
CVE-2018-14643 is a high (CVSS 10.0) DEPRECATED: Authentication Bypass Issues vulnerability in theforeman foreman. EPSS estimates a 6.06% chance of exploitation in the next 30 days, higher than 93.2% of scored vulnerabilities.
CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
6.06%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 21-09-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remotely execute arbitrary commands on machines managed by vulnerable Foreman instances, in a highly privileged context.
CVSS metrics
5 scores · 4 sources · 2 versionsCritical 9.8Preferred score · CVE.org (CNA)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- NVDNIST9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · RubygemsEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
6.06%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 6.06% on 18-09-2026
18-09-202618-10-2026
EPSS score6.06%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-592DEPRECATED: Authentication Bypass IssuesThis weakness has been deprecated because it covered redundant concepts already described in CWE-287.
- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected systems
[unknown]1 product
Redhat1 product
- rubygem-smart_proxy_dynflow< 0:0.1.10.2-1.el7sat
RubyGems1 product
- smart_proxy_dynflow≥ 0.2.0, < 0.2.1 | < 0.1.11
Theforeman1 product
- foremanna
4 vendors · 4 products
References
13 links- access.redhat.com/errata/RHSA-2018:2733Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisoryWEB
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14643X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryWEB
