CVE-2014-0135

low

Published 2014-03-13 · Modified 2024-12-06

CVSS v3

—

CVSS v2

1.9

VIR risk

1.9

Description

Kafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://theforeman.org/security.html

Ecosystem	Package	Vulnerable	Fixed
RubyGems	kafo	`<~> 0.3.17`	`~> 0.3.17`
RubyGems	kafo	`<0.3.17`	`0.3.17`
RubyGems	kafo	`>=0.4.0,<0.5.2`	`0.5.2`

Vendor	Product	Versions
theforeman	kafo	`{"endIncluding":"0.3.16"}`
theforeman	kafo	`0.0.1`
theforeman	kafo	`0.0.2`
theforeman	kafo	`0.0.3`
theforeman	kafo	`0.0.4`
theforeman	kafo	`0.0.5`
theforeman	kafo	`0.0.6`
theforeman	kafo	`0.0.7`
theforeman	kafo	`0.0.8`
theforeman	kafo	`0.0.9`
theforeman	kafo	`0.0.10`
theforeman	kafo	`0.0.11`
theforeman	kafo	`0.0.12`
theforeman	kafo	`0.0.13`
theforeman	kafo	`0.0.14`
theforeman	kafo	`0.0.15`
theforeman	kafo	`0.0.16`
theforeman	kafo	`0.0.17`
theforeman	kafo	`0.1.0`
theforeman	kafo	`0.2.0`
theforeman	kafo	`0.2.1`
theforeman	kafo	`0.2.2`
theforeman	kafo	`0.3.0`
theforeman	kafo	`0.3.1`
theforeman	kafo	`0.3.2`
theforeman	kafo	`0.3.3`
theforeman	kafo	`0.3.4`
theforeman	kafo	`0.3.5`
theforeman	kafo	`0.3.6`
theforeman	kafo	`0.3.7`
theforeman	kafo	`0.3.8`
theforeman	kafo	`0.3.9`
theforeman	kafo	`0.3.10`
theforeman	kafo	`0.3.11`
theforeman	kafo	`0.3.12`
theforeman	kafo	`0.3.13`
theforeman	kafo	`0.3.14`
theforeman	kafo	`0.3.15`
theforeman	kafo	`0.4.0`
theforeman	kafo	`0.5.0`
theforeman	kafo	`0.5.1`

CWE-264

Verify integrity in audit chain (admin only). AS-IS.