CVE-2016-9593mediumCWE-522

CVE-2016-9593: medium-severity vulnerability in foreman-debug

Published · Updated

Follow this CVE+ Monitor foreman-debug

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.7epss 1.0%
foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems.
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
unspecified · foreman-debug