CVE-2014-0241

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

5.5 MediumFix available

CVE-2014-0241 is a medium vulnerability (CVSS 5.5) in Redhat Satellite, published December 13, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. Fixed in libmongodb 0:2.4.6-2.el6sat.

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.31%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 5.5

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

Record: CVE-2014-0241
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-522
Updated: 2026-11-02

CVE List No score

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

Record: CVE-2014-0241
Updated: 2026-11-02

EUVDEUVD-2014-0279 No score

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

Record: EUVD-2014-0279
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h459-7mrx-8pvc 5.5

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

Record: GHSA-h459-7mrx-8pvc
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-522
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libmongodb` Red Hat:satellite_capsule:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb` Red Hat:satellite_capsule:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-debuginfo` Red Hat:satellite_capsule:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-server` Red Hat:satellite_capsule:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`libmongodb` Red Hat:satellite:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb` Red Hat:satellite:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-debuginfo` Red Hat:satellite:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-server` Red Hat:satellite:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb` Red Hat:satellite_capsule:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb-debuginfo` Red Hat:satellite_capsule:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat

Show 56 moreShow less

Affected packages
Package	Affected	Fixed
`mongodb-server` Red Hat:satellite_capsule:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb` Red Hat:satellite:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb-debuginfo` Red Hat:satellite:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb-server` Red Hat:satellite:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`katello` Red Hat:satellite:6.0::el6	before 0:1.5.0-30.el6sat	0:1.5.0-30.el6sat
`katello` Red Hat:satellite:6.0::el7	before 0:1.5.0-30.el7sat	0:1.5.0-30.el7sat
`foreman` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-compute` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-gce` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-libvirt` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-ovirt` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-postgresql` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-vmware` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-compute` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-gce` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-libvirt` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-ovirt` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-postgresql` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-vmware` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`v8` Red Hat:satellite_capsule:6.0::el6	before 1:3.14.5.10-9.el6sat	1:3.14.5.10-9.el6sat
`v8-debuginfo` Red Hat:satellite_capsule:6.0::el6	before 1:3.14.5.10-9.el6sat	1:3.14.5.10-9.el6sat
`v8` Red Hat:satellite:6.0::el6	before 1:3.14.5.10-9.el6sat	1:3.14.5.10-9.el6sat
`v8-debuginfo` Red Hat:satellite:6.0::el6	before 1:3.14.5.10-9.el6sat	1:3.14.5.10-9.el6sat
`v8` Red Hat:satellite_capsule:6.0::el7	before 1:3.14.5.10-11.el7sat	1:3.14.5.10-11.el7sat
`v8-debuginfo` Red Hat:satellite_capsule:6.0::el7	before 1:3.14.5.10-11.el7sat	1:3.14.5.10-11.el7sat
`v8` Red Hat:satellite:6.0::el7	before 1:3.14.5.10-11.el7sat	1:3.14.5.10-11.el7sat
`v8-debuginfo` Red Hat:satellite:6.0::el7	before 1:3.14.5.10-11.el7sat	1:3.14.5.10-11.el7sat
`python-httplib2` Red Hat:satellite_capsule:6.0::el6	before 0:0.7.2-1.el6	0:0.7.2-1.el6
`python-httplib2` Red Hat:satellite:6.0::el6	before 0:0.7.2-1.el6	0:0.7.2-1.el6
`python-httplib2` Red Hat:satellite_capsule:6.0::el7	before 0:0.6.0-6.el7sat	0:0.6.0-6.el7sat
`python-httplib2` Red Hat:satellite:6.0::el7	before 0:0.6.0-6.el7sat	0:0.6.0-6.el7sat
`foreman-proxy` Red Hat:satellite_capsule:6.0::el6	before 0:1.6.0.30-1.el6sat	0:1.6.0.30-1.el6sat
`foreman-proxy` Red Hat:satellite:6.0::el6	before 0:1.6.0.30-1.el6sat	0:1.6.0.30-1.el6sat
`foreman-proxy` Red Hat:satellite_capsule:6.0::el7	before 0:1.6.0.30-1.el7sat	0:1.6.0.30-1.el7sat
`foreman-proxy` Red Hat:satellite:6.0::el7	before 0:1.6.0.30-1.el7sat	0:1.6.0.30-1.el7sat
`rubygem-kafo` Red Hat:satellite_capsule:6.0::el6	before 0:0.6.4-2.el6sat	0:0.6.4-2.el6sat
`rubygem-kafo_parsers` Red Hat:satellite_capsule:6.0::el6	before 0:0.0.3-2.el6sat	0:0.0.3-2.el6sat
`rubygem-kafo` Red Hat:satellite:6.0::el6	before 0:0.6.4-2.el6sat	0:0.6.4-2.el6sat
`rubygem-kafo_parsers` Red Hat:satellite:6.0::el6	before 0:0.0.3-2.el6sat	0:0.0.3-2.el6sat
`rubygem-kafo` Red Hat:satellite_capsule:6.0::el7	before 0:0.6.4-2.el7sat	0:0.6.4-2.el7sat
`rubygem-kafo_parsers` Red Hat:satellite_capsule:6.0::el7	before 0:0.0.3-2.el7sat	0:0.0.3-2.el7sat
`rubygem-kafo` Red Hat:satellite:6.0::el7	before 0:0.6.4-2.el7sat	0:0.6.4-2.el7sat
`rubygem-kafo_parsers` Red Hat:satellite:6.0::el7	before 0:0.0.3-2.el7sat	0:0.0.3-2.el7sat
`rubygem-hammer_cli_foreman` Red Hat:satellite:6.0::el6	before 0:0.1.1-16.el6sat	0:0.1.1-16.el6sat
`rubygem-hammer_cli_foreman_tasks` Red Hat:satellite:6.0::el6	before 0:0.0.3-3.el6sat	0:0.0.3-3.el6sat
`rubygem-hammer_cli_foreman` Red Hat:satellite:6.0::el7	before 0:0.1.1-16.el7sat	0:0.1.1-16.el7sat
`rubygem-hammer_cli_foreman_tasks` Red Hat:satellite:6.0::el7	before 0:0.0.3-3.el7sat	0:0.0.3-3.el7sat
`python-anyjson` Red Hat:satellite_capsule:6.0::el6	before 0:0.3.3-4.el6sat	0:0.3.3-4.el6sat
`python-anyjson` Red Hat:satellite:6.0::el6	before 0:0.3.3-4.el6sat	0:0.3.3-4.el6sat
`python-anyjson` Red Hat:satellite_capsule:6.0::el7	before 0:0.3.3-5.el7sat	0:0.3.3-5.el7sat
`python-simplejson` Red Hat:satellite_capsule:6.0::el7	before 0:3.2.0-1.el7sat	0:3.2.0-1.el7sat
`python-simplejson-debuginfo` Red Hat:satellite_capsule:6.0::el7	before 0:3.2.0-1.el7sat	0:3.2.0-1.el7sat
`python-anyjson` Red Hat:satellite:6.0::el7	before 0:0.3.3-5.el7sat	0:0.3.3-5.el7sat
`python-simplejson` Red Hat:satellite:6.0::el7	before 0:3.2.0-1.el7sat	0:3.2.0-1.el7sat
`python-simplejson-debuginfo` Red Hat:satellite:6.0::el7	before 0:3.2.0-1.el7sat	0:3.2.0-1.el7sat

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 98 moreShow less