Every CVESearch/Get API key

CVE-2014-3691

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2...

7.5 HighFix available

CVE-2014-3691 is a high vulnerability (CVSS 7.5) in Theforeman Foreman, published March 9, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.71%, the 77th percentile. Fixed in foreman-proxy 0:1.6.0.33-1.el6sat.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
1.71%EPSS, 77th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0:1.6.0.33-1.el6satforeman-proxy +117 more

Description

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Exploit likelihood

1.71%Up 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
foreman-proxy
Red Hat:satellite_capsule:6.0::el6
before 0:1.6.0.33-1.el6sat
0:1.6.0.33-1.el6sat
katello-agent
Red Hat:satellite_capsule:6.0::el6
before 0:1.5.3-7.el6sat
0:1.5.3-7.el6sat
katello-installer
Red Hat:satellite_capsule:6.0::el6
before 0:0.0.67-1.el6sat
0:0.0.67-1.el6sat
pulp
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-admin-client
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-child
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-common
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-parent
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
Show 108 moreShow less
Affected packages
PackageAffectedFixed
pulp-puppet-admin-extensions
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet-plugins
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-rpm
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-admin-extensions
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-handlers
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-plugins
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-selinux
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-server
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-agent-lib
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-bindings
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-client-lib
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-common
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-puppet-common
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-rpm-common
Red Hat:satellite_capsule:6.0::el6
before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
foreman
Red Hat:satellite:6.0::el6
before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-compute
Red Hat:satellite:6.0::el6
before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-gce
Red Hat:satellite:6.0::el6
before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-libvirt
Red Hat:satellite:6.0::el6
before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-ovirt
Red Hat:satellite:6.0::el6
before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-postgresql
Red Hat:satellite:6.0::el6
before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-proxy
Red Hat:satellite:6.0::el6
before 0:1.6.0.33-1.el6sat
0:1.6.0.33-1.el6sat
foreman-vmware
Red Hat:satellite:6.0::el6
before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
katello-agent
Red Hat:satellite:6.0::el6
before 0:1.5.3-7.el6sat
0:1.5.3-7.el6sat
katello-installer
Red Hat:satellite:6.0::el6
before 0:0.0.67-1.el6sat
0:0.0.67-1.el6sat
pulp
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-admin-client
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-child
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-common
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-parent
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet-admin-extensions
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet-plugins
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet-tools
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-rpm
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-admin-extensions
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-handlers
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-plugins
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-selinux
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-server
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-agent-lib
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-bindings
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-client-lib
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-common
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-puppet-common
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-rpm-common
Red Hat:satellite:6.0::el6
before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
ruby193-rubygem-fog
Red Hat:satellite:6.0::el6
before 0:1.21.0-3.2.el6sat
0:1.21.0-3.2.el6sat
ruby193-rubygem-foreman-tasks
Red Hat:satellite:6.0::el6
before 0:0.6.9-1.2.el6sat
0:0.6.9-1.2.el6sat
foreman-proxy
Red Hat:satellite_capsule:6.0::el7
before 0:1.6.0.33-1.el7sat
0:1.6.0.33-1.el7sat
katello-agent
Red Hat:satellite_capsule:6.0::el7
before 0:1.5.3-7.el7sat
0:1.5.3-7.el7sat
katello-installer
Red Hat:satellite_capsule:6.0::el7
before 0:0.0.67-1.el7sat
0:0.0.67-1.el7sat
pulp
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-admin-client
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-child
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-common
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-parent
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet-admin-extensions
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet-plugins
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-rpm
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-admin-extensions
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-handlers
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-plugins
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-selinux
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-server
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-agent-lib
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-bindings
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-client-lib
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-common
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-puppet-common
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-rpm-common
Red Hat:satellite_capsule:6.0::el7
before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
foreman
Red Hat:satellite:6.0::el7
before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-compute
Red Hat:satellite:6.0::el7
before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-gce
Red Hat:satellite:6.0::el7
before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-libvirt
Red Hat:satellite:6.0::el7
before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-ovirt
Red Hat:satellite:6.0::el7
before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-postgresql
Red Hat:satellite:6.0::el7
before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-proxy
Red Hat:satellite:6.0::el7
before 0:1.6.0.33-1.el7sat
0:1.6.0.33-1.el7sat
foreman-vmware
Red Hat:satellite:6.0::el7
before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
katello-agent
Red Hat:satellite:6.0::el7
before 0:1.5.3-7.el7sat
0:1.5.3-7.el7sat
katello-installer
Red Hat:satellite:6.0::el7
before 0:0.0.67-1.el7sat
0:0.0.67-1.el7sat
pulp
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-admin-client
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-child
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-common
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-parent
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet-admin-extensions
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet-plugins
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet-tools
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-rpm
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-admin-extensions
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-handlers
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-plugins
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-selinux
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-server
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-agent-lib
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-bindings
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-client-lib
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-common
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-puppet-common
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-rpm-common
Red Hat:satellite:6.0::el7
before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
ruby193-rubygem-fog
Red Hat:satellite:6.0::el7
before 0:1.21.0-3.2.el7sat
0:1.21.0-3.2.el7sat
ruby193-rubygem-foreman-tasks
Red Hat:satellite:6.0::el7
before 0:0.6.9-1.2.el7sat
0:0.6.9-1.2.el7sat
foreman-proxy
Red Hat:openstack-installer:5::el6
before 0:1.6.0.33-2.el6ost
0:1.6.0.33-2.el6ost
foreman-proxy
Red Hat:openstack:4::el6
before 0:1.3.0-7.el6ost
0:1.3.0-7.el6ost

What each source reports

NVD Score used7.5

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Record
CVE-2014-3691
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-310
Updated
2026-11-02
CVE ListNo score

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Record
CVE-2014-3691
Updated
2026-11-02
EUVDEUVD-2014-3637No score

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Record
EUVD-2014-3637
Updated
2026-11-03
GitHub AdvisoriesGHSA-m4h9-hcv2-hw6hNo score

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2...

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Record
GHSA-m4h9-hcv2-hw6h
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 18 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open