NA

CVE-2023-4886

Published: 03/10/2023 Updated: 01/03/2024
CVSS v3 Base Score: 4.4 | Impact Score: 3.6 | Exploitability Score: 0.8
VMScore: 0

Vulnerability Summary

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

Vulnerable Product Search on Vulmon Subscribe to Product

theforeman foreman

redhat satellite 6.0

Vendor Advisories

概述 Moderate: Satellite 6141 Async Security Update 类型/严重性 Security Advisory: Moderate Red Hat Insights 补丁分析 识别并修复受此公告影响的系统。 查看受影响的系统 标题 Updated Satellite 614 packages that fixes Important security bugs and severalregular bugs are now available for Red Hat Sate ...
Description<!---->A sensitive information exposure vulnerability was found in foreman Contents of tomcat's serverxml file, which contain passwords to candlepin's keystore and truststore, were found to be world readableA sensitive information exposure vulnerability was found in foreman Contents of tomcat's serverxml file, which contain password ...