Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-10710

Опубликовано: 10 дек. 2021
Источник: redhat
CVSS3: 5.3
EPSS Низкий

Описание

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-522
https://bugzilla.redhat.com/show_bug.cgi?id=1816747foreman-installer: Candlepin plaintext password disclosure while Satellite update

EPSS

Процентиль: 14%
0.0023
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.4
nvd
около 4 лет назад

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

CVSS3: 4.4
github
около 4 лет назад

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

EPSS

Процентиль: 14%
0.0023
Низкий

5.3 Medium

CVSS3

Уязвимость CVE-2020-10710