CVE-2015-1816: Theforeman Foreman

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-middle attackers to spoof LDAP servers via a crafted certificate.

Affected products

• Theforeman Foreman: up to and including 1.7.3

Published 2015-08-14. Last modified 2026-06-17.