CVE-2014-8164

CVE-2014-8164 describes an insecure configuration in Red Hat CloudForms 5.x, specifically the use of OpenSSL::SSL::VERIFY_NONE for certificate verification, which allows for a verification bypass. This vulnerability is rated as Critical with a CVSS score of 9.1, indicating it can be exploited remotely with low complexity to achieve high confidentiality and integrity impacts without user interaction. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, with 10 mentions.