← voltar
CVE-2023-4886

Foreman: world readable file containing secrets

CVSS 6.7 MEDIUMEPSS 0.3%CWE-200
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Red Hat · Red Hat Satellite 6.13 for RHEL 8Red Hat · Red Hat Satellite 6.14 for RHEL 8

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://access.redhat.com/errata/RHSA-2023:7851https://access.redhat.com/errata/RHSA-2024:1061https://access.redhat.com/security/cve/CVE-2023-4886https://bugzilla.redhat.com/show_bug.cgi?id=2230135