Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-82j5-w3wh-5hfm

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.

A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.

EPSS

Процентиль: 39%
0.00175
Низкий

8.8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 6.5
redhat
почти 9 лет назад

A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.

CVSS3: 6.5
nvd
больше 7 лет назад

A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.

CVSS3: 6.5
debian
больше 7 лет назад

A flaw was found in foreman before version 1.15 in the logging of addi ...

EPSS

Процентиль: 39%
0.00175
Низкий

8.8 High

CVSS3

Дефекты

CWE-269