A flaw was found in discovery-debug in foreman. An attacker, with permissions to view the debug results, would be able to view the root password associated with that system, potentially allowing them to access it.
Find out more about CVE-2016-4996 from the MITRE CVE dictionary dictionary and NIST NVD.
| Base Score | 6.2 |
|---|---|
| Base Metrics | AV:L/AC:H/Au:N/C:C/I:C/A:C |
| Access Vector | Local |
| Access Complexity | High |
| Authentication | None |
| Confidentiality Impact | Complete |
| Integrity Impact | Complete |
| Availability Impact | Complete |
| CVSS3 Base Score | 7.5 |
|---|---|
| CVSS3 Base Metrics | CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
| Attack Vector | Local |
| Attack Complexity | High |
| Privileges Required | High |
| User Interaction | None |
| Scope | Changed |
| Confidentiality | High |
| Integrity Impact | High |
| Availability Impact | High |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Satellite 6.3 (foreman) | RHSA-2018:0336 | 2018-02-21 |
| Red Hat Satellite Capsule 6.3 (foreman) | RHSA-2018:0336 | 2018-02-21 |
| Platform | Package | State |
|---|---|---|
| Red Hat Satellite 6 | foreman | Will not fix |
| Red Hat Ceph Storage 1.3 | foreman | Will not fix |
Vulmon