What’s Vulnerable › Vulnerabilities
CVE-2014-4507
- Severity: medium (CVSS 6.4 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2014-06-20 · updated 2026-06-17
- Weakness: CWE-22
Description
Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the dst parameter to tftp/fetch_boot_file.
Affected products
- foreman: through 1.4.4; 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.5.0
References
Get alerted when CVE-2014-4507 or the next vulnerability affects your stack