CVE-2017-2667: Red Hat Satellite

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.

Affected products

• Red Hat Satellite: version 6.3 only
• Red Hat Satellite Capsule: version 6.3 only
• Theforeman Hammer CLI: before 0.10.0 (fixed in 0.10.0)

Published 2018-03-12. Last modified 2026-06-17.