CVE-2014-8164

2022-07-0619:06:41

CWE-295

redhat

www.cve.org

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x.

CNA Affected

[
  {
    "product": "Red Hat CloudForms",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Red Hat CloudForms 5.x"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1151208