CVE-2014-3691

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.

• CWE-310

• http://projects.theforeman.org/issues/7822Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0287.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0288.htmlThird Party Advisory
• https://github.com/theforeman/smart-proxy/pull/217Issue Tracking, Patch
• https://groups.google.com/forum/#%21topic/foreman-announce/jXC5ixybjqo
• http://projects.theforeman.org/issues/7822Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0287.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0288.htmlThird Party Advisory
• https://github.com/theforeman/smart-proxy/pull/217Issue Tracking, Patch
• https://groups.google.com/forum/#%21topic/foreman-announce/jXC5ixybjqo

Published

Mar 9, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3685Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-3686wpa_supplicant and hostapd 0.7.2 through 2.2, when running w…
• CVE-2014-3687The sctp_assoc_lookup_asconf_ack function in net/sctp/associ…7.5
• CVE-2014-3688The SCTP implementation in the Linux kernel before 3.17.4 al…
• CVE-2014-3689The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allo…
• CVE-2014-3690arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel …5.5
• CVE-2014-3692The customization template in Red Hat CloudForms 3.1 Managem…
• CVE-2014-3693Use-after-free vulnerability in the socket manager of Impres…
• CVE-2014-3694The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled Op…
• CVE-2014-3695markup.c in the MXit protocol plugin in libpurple in Pidgin …
• CVE-2014-3696nmevent.c in the Novell GroupWise protocol plugin in libpurp…
• CVE-2014-3697Absolute path traversal vulnerability in the untar_block fun…