CVE-2014-3691: High severity red hat openstack for ibm power vulnerability
Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3691?
CVE-2014-3691 is classified as a critical vulnerability due to its ability to allow remote attackers to bypass authentication.
How do I fix CVE-2014-3691?
To fix CVE-2014-3691, upgrade Foreman to version 1.5.4 or 1.6.2 or later to ensure proper SSL certificate validation.
What products are affected by CVE-2014-3691?
CVE-2014-3691 affects Foreman versions prior to 1.5.4 and 1.6.x versions before 1.6.2, as well as specific versions of Red Hat OpenStack.
What types of attacks can be executed due to CVE-2014-3691?
Due to CVE-2014-3691, attackers can potentially execute arbitrary API requests without proper authentication.
Is CVE-2014-3691 exploitable over the internet?
Yes, CVE-2014-3691 can be exploited over the internet if the affected systems are accessible from external networks.