6.7
Medium
CVE-2023-4886 A sensitive information exposure vulnerability was found in foreman
Description
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Satellite 6.13 for RHEL 8 | Versions not published | |
| Red Hat Satellite 6.14 for RHEL 8 | Versions not published |
References
- RHSA-2023:7851 access.redhat.com
- RHSA-2024:1061 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2230135 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Satellite 6.13 for RHEL 8
The 6 CVEs of Red Hat Satellite 6.13 for RHEL 8 →
CVE-2024-8553
A vulnerability was found in Foreman's loader macros introduced with report templates
6.3
Medium
CVE-2024-7923
An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to…
9.8
Critical
CVE-2024-7012
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to…
9.8
Critical
CVE-2023-0118
An arbitrary code execution flaw was found in Foreman
9.1
Critical