FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-01-14 21:31:10 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
2d6de6a8-fb78-4149-aeda-77fc8f140f06	smart_proxy_dynflow -- authentication bypass vulnerability MITRE reports: An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remotely execute arbitrary commands on machines managed by vulnerable Foreman instances, in a highly privileged context. Discovery 2018-09-20 Entry 2018-09-22 rubygem-smart_proxy_dynflow < 0.2.1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-14643 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14643 CVE-2018-14643

VuXML ID

Description

2d6de6a8-fb78-4149-aeda-77fc8f140f06

smart_proxy_dynflow -- authentication bypass vulnerability

MITRE reports:

An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remotely execute arbitrary commands on machines managed by vulnerable Foreman instances, in a highly privileged context.

Discovery 2018-09-20
Entry 2018-09-22
rubygem-smart_proxy_dynflow

< 0.2.1

https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-14643
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14643
CVE-2018-14643