What is the CVSS score of CVE-2014-0007?

CVE-2014-0007 has a CVSS 2.0 base score of 7.5 (High). CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 6.4%.

Is there a public PoC exploit available for CVE-2014-0007?

Yes, a public proof-of-concept exploit is available for CVE-2014-0007. Prioritise patching immediately. EPSS: 6.4%.

Is there a patch available for CVE-2014-0007?

Yes, a patch is available for CVE-2014-0007. Update the affected software to the latest version immediately.

Foreman CVE-2014-0007

HIGH

2014-06-20 secalert@redhat.com

Information Disclosure Foreman

7.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:P/I:P/A:P

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Jun 20, 2014 - 14:55 cve.org

HIGH 7.5

DescriptionCVE.org

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.

AnalysisAI

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file. Affected products include: Theforeman Foreman. Version information: before 1.4.5.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Foreman

View all

CVE-2013-2121 MEDIUM This Month POC

6.0 Jul 31

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote

CVE-2013-2113 MEDIUM This Month POC

6.0 Jul 31

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users w

CVE-2018-14643 CRITICAL Act Now

9.8 Sep 21

An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. Rated critical severity (C

CVE-2014-0208 MEDIUM This Month POC

5.4 Oct 16

Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remo

CVE-2016-3728 HIGH This Week

8.8 May 20

Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x be

CVE-2023-0462 CRITICAL Act Now

9.1 Sep 20

An arbitrary code execution flaw was found in Foreman. Rated critical severity (CVSS 9.1), this vulnerability is remotel

CVE-2023-0118 CRITICAL Act Now

9.1 Sep 20

An arbitrary code execution flaw was found in Foreman. Rated critical severity (CVSS 9.1), this vulnerability is remotel

CVE-2014-0192 MEDIUM This Month POC

5.0 May 08

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote atta

CVE-2017-7505 HIGH This Week

8.8 May 26

Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management perm

CVE-2016-4475 HIGH This Week

8.8 Aug 19

The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote a

CVE-2018-1097 HIGH This Week

8.8 Apr 04

A flaw was found in foreman before 1.16.1. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, l

CVE-2014-3653 MEDIUM This Month POC

4.3 Jul 06

Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attacker

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2014-0007 vulnerability details – vuln.today

Back