Vendor
The Foreman smart_proxy_dynflow package fails to properly validate client certificates, allowing attackers with a valid CA-signed certificate to access sensitive job details or manipulate running tasks.