Every CVE Search/ Get API key

CVE-2014-3691

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2...

7.5 HighFix available

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Exploit likelihood

1.71%Up 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Record
CVE-2014-3691
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-310
Updated
2026-11-02
CVE List No score

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Record
CVE-2014-3691
Updated
2026-11-02
EUVDEUVD-2014-3637 No score

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Record
EUVD-2014-3637
Updated
2026-11-03
GitHub AdvisoriesGHSA-m4h9-hcv2-hw6h No score

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2...

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

Record
GHSA-m4h9-hcv2-hw6h
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
foreman-proxy
Red Hat:satellite_capsule:6.0::el6
 before 0:1.6.0.33-1.el6sat
0:1.6.0.33-1.el6sat
katello-agent
Red Hat:satellite_capsule:6.0::el6
 before 0:1.5.3-7.el6sat
0:1.5.3-7.el6sat
katello-installer
Red Hat:satellite_capsule:6.0::el6
 before 0:0.0.67-1.el6sat
0:0.0.67-1.el6sat
pulp
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-admin-client
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-child
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-common
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-parent
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
Show 108 moreShow less
Affected packages
PackageAffectedFixed
pulp-puppet-admin-extensions
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet-plugins
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-rpm
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-admin-extensions
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-handlers
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-plugins
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-selinux
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-server
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-agent-lib
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-bindings
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-client-lib
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-common
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-puppet-common
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-rpm-common
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
foreman
Red Hat:satellite:6.0::el6
 before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-compute
Red Hat:satellite:6.0::el6
 before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-gce
Red Hat:satellite:6.0::el6
 before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-libvirt
Red Hat:satellite:6.0::el6
 before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-ovirt
Red Hat:satellite:6.0::el6
 before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-postgresql
Red Hat:satellite:6.0::el6
 before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
foreman-proxy
Red Hat:satellite:6.0::el6
 before 0:1.6.0.33-1.el6sat
0:1.6.0.33-1.el6sat
foreman-vmware
Red Hat:satellite:6.0::el6
 before 0:1.6.0.51-1.el6sat
0:1.6.0.51-1.el6sat
katello-agent
Red Hat:satellite:6.0::el6
 before 0:1.5.3-7.el6sat
0:1.5.3-7.el6sat
katello-installer
Red Hat:satellite:6.0::el6
 before 0:0.0.67-1.el6sat
0:0.0.67-1.el6sat
pulp
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-admin-client
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-child
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-common
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-nodes-parent
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet-admin-extensions
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet-plugins
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-puppet-tools
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-rpm
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-admin-extensions
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-handlers
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-rpm-plugins
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
pulp-selinux
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
pulp-server
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-agent-lib
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-bindings
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-client-lib
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-common
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-puppet-common
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.el6sat
0:2.4.4-1.el6sat
python-pulp-rpm-common
Red Hat:satellite:6.0::el6
 before 0:2.4.4-1.1.el6sat
0:2.4.4-1.1.el6sat
ruby193-rubygem-fog
Red Hat:satellite:6.0::el6
 before 0:1.21.0-3.2.el6sat
0:1.21.0-3.2.el6sat
ruby193-rubygem-foreman-tasks
Red Hat:satellite:6.0::el6
 before 0:0.6.9-1.2.el6sat
0:0.6.9-1.2.el6sat
foreman-proxy
Red Hat:satellite_capsule:6.0::el7
 before 0:1.6.0.33-1.el7sat
0:1.6.0.33-1.el7sat
katello-agent
Red Hat:satellite_capsule:6.0::el7
 before 0:1.5.3-7.el7sat
0:1.5.3-7.el7sat
katello-installer
Red Hat:satellite_capsule:6.0::el7
 before 0:0.0.67-1.el7sat
0:0.0.67-1.el7sat
pulp
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-admin-client
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-child
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-common
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-parent
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet-admin-extensions
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet-plugins
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-rpm
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-admin-extensions
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-handlers
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-plugins
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-selinux
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-server
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-agent-lib
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-bindings
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-client-lib
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-common
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-puppet-common
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-rpm-common
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
foreman
Red Hat:satellite:6.0::el7
 before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-compute
Red Hat:satellite:6.0::el7
 before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-gce
Red Hat:satellite:6.0::el7
 before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-libvirt
Red Hat:satellite:6.0::el7
 before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-ovirt
Red Hat:satellite:6.0::el7
 before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-postgresql
Red Hat:satellite:6.0::el7
 before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
foreman-proxy
Red Hat:satellite:6.0::el7
 before 0:1.6.0.33-1.el7sat
0:1.6.0.33-1.el7sat
foreman-vmware
Red Hat:satellite:6.0::el7
 before 0:1.6.0.51-1.el7sat
0:1.6.0.51-1.el7sat
katello-agent
Red Hat:satellite:6.0::el7
 before 0:1.5.3-7.el7sat
0:1.5.3-7.el7sat
katello-installer
Red Hat:satellite:6.0::el7
 before 0:0.0.67-1.el7sat
0:0.0.67-1.el7sat
pulp
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-admin-client
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-child
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-common
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-nodes-parent
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet-admin-extensions
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet-plugins
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-puppet-tools
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-rpm
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-admin-extensions
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-handlers
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-rpm-plugins
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
pulp-selinux
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
pulp-server
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-agent-lib
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-bindings
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-client-lib
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-common
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-puppet-common
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.el7sat
0:2.4.4-1.el7sat
python-pulp-rpm-common
Red Hat:satellite:6.0::el7
 before 0:2.4.4-1.1.el7sat
0:2.4.4-1.1.el7sat
ruby193-rubygem-fog
Red Hat:satellite:6.0::el7
 before 0:1.21.0-3.2.el7sat
0:1.21.0-3.2.el7sat
ruby193-rubygem-foreman-tasks
Red Hat:satellite:6.0::el7
 before 0:0.6.9-1.2.el7sat
0:0.6.9-1.2.el7sat
foreman-proxy
Red Hat:openstack-installer:5::el6
 before 0:1.6.0.33-2.el6ost
0:1.6.0.33-2.el6ost
foreman-proxy
Red Hat:openstack:4::el6
 before 0:1.3.0-7.el6ost
0:1.3.0-7.el6ost

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3691 is a high vulnerability (CVSS 7.5) in Theforeman Foreman, published March 9, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.71%, the 77th percentile. Fixed in foreman-proxy 0:1.6.0.33-1.el6sat.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open