CVE-2014-8164

Summary

A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x.

Affected Software

VendorProductVersion RangeStatus
n/aRed Hat CloudFormsRed Hat CloudForms 5.xaffected

Weaknesses

  • CWE-295: CWE-295

ADP Enrichment

CVE Program Container

Additional References

References