Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-4886

Опубликовано: 03 окт. 2023
Источник: debian
EPSS Низкий

Описание

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
foremanitppackage

EPSS

Процентиль: 22%
0.00288
Низкий

Связанные уязвимости

CVSS3: 6.7
redhat
около 3 лет назад

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

CVSS3: 4.4
nvd
около 3 лет назад

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

CVSS3: 6.7
github
около 3 лет назад

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

CVSS3: 9.1
altlinux
больше 1 года назад

ALT-PU-2025-3716: package `foreman` update to version 3.13.0-alt2

EPSS

Процентиль: 22%
0.00288
Низкий