| Package | Affected versions | Patched versions |
|---|---|---|
| hammer_cli_foreman | < 0.10.0 | 0.10.0 |
| satellite | = 6.3 | |
| satellite capsule | = 6.3 | |
| hammer cli | < 0.10.0 | 0.10.0 |
Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free