Description (CNA)
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat Satellite 6.13 for RHEL 8 | unaffected 0:3.5.1.24-1.el8sat before * |
| Red Hat / Red Hat Satellite 6.14 for RHEL 8 | unaffected 0:3.7.0.10-1.el8sat before * |
| Red Hat / Red Hat Satellite 6.14 for RHEL 8 | unaffected 1:3.7.0.5-1.el8sat before * |
CWE
CWE-200
References
- https://access.redhat.com/errata/RHSA-2023:7851
- https://access.redhat.com/errata/RHSA-2024:1061
- https://access.redhat.com/security/cve/CVE-2023-4886
- https://bugzilla.redhat.com/show_bug.cgi?id=2230135
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.