CVE-2015-1816

MEDIUM 5.0CVE-2015-1816 · Published 14/08/2015 · updated 17/06/2026

In short

CVE-2015-1816 is a MEDIUM (CVSS 5.0) vulnerability affecting foreman (theforeman).
Chance of exploitation in the next 30 days (EPSS): 0.94%, higher than 61.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
foreman theforeman	`≤ 1.7.3`	No fix yet

Description

Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-middle attackers to spoof LDAP servers via a crafted certificate.

References

projects.theforeman.org/issues/9858 · Vendor Advisory
access.redhat.com/errata/RHSA-2015:1591
access.redhat.com/errata/RHSA-2015:1592
theforeman/foreman#2265
groups.google.com/forum

More vulnerabilities in foreman

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free