CVE-2015-1816 | BDVDB-2026-70921 Detail

Description#

Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-middle attackers to spoof LDAP servers via a crafted certificate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://access.redhat.com/errata/RHSA-2015:1592
https://github.com/theforeman/foreman/pull/2265
http://projects.theforeman.org/issues/9858
https://access.redhat.com/errata/RHSA-2015:1591
https://groups.google.com/forum/#%21topic/foreman-announce/9ZnuPcplNLI

Exploit#

No public exploit known

History#

Version 12015-08-14Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.