Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r2mj-49jv-4jq7

Опубликовано: 03 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

EPSS

Процентиль: 22%
0.00288
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.7
redhat
около 3 лет назад

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

CVSS3: 4.4
nvd
около 3 лет назад

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

CVSS3: 4.4
debian
около 3 лет назад

A sensitive information exposure vulnerability was found in foreman. C ...

CVSS3: 9.1
altlinux
больше 1 года назад

ALT-PU-2025-3716: package `foreman` update to version 3.13.0-alt2

EPSS

Процентиль: 22%
0.00288
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-200