In Foreman it exists that the delete compute resource operation, when executed from the Foreman API, leads to the disclosure of the plaintext password or token for the affected compute resource. A malicious user with the "delete_compute_resource" permission can use this flaw to take control over compute resources managed by foreman. Versions prior to 1.20.3, 1.21.1, 1.22.0 are vulnerable.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
theforeman foreman |
||
redhat satellite 6.0 |
Vulmon