6.7
Moyenne
CVE-2023-4886 A sensitive information exposure vulnerability was found in foreman
Description
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Satellite 6.13 for RHEL 8 | Versions non publiées | |
| Red Hat Satellite 6.14 for RHEL 8 | Versions non publiées |
Références
- RHSA-2023:7851 access.redhat.com
- RHSA-2024:1061 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2230135 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Satellite 6.13 for RHEL 8
Les 6 CVE de Red Hat Satellite 6.13 for RHEL 8 →
CVE-2024-8553
A vulnerability was found in Foreman's loader macros introduced with report templates
6.3
Moyenne
CVE-2024-7923
An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to…
9.8
Critique
CVE-2024-7012
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to…
9.8
Critique
CVE-2023-0118
An arbitrary code execution flaw was found in Foreman
9.1
Critique