Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-10716

Опубликовано: 23 апр. 2020
Источник: redhat
CVSS3: 4.3
EPSS Низкий

Описание

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data.

Дополнительная информация

Статус:

Low
Дефект:
CWE-285
https://bugzilla.redhat.com/show_bug.cgi?id=1827300rubygem-foreman_ansible: "User input" entry from Job Invocation may contain sensitive data

EPSS

Процентиль: 44%
0.00215
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.

CVSS3: 6.5
redos
около 1 месяца назад

Уязвимость python3-pycurl

CVSS3: 6.5
github
больше 3 лет назад

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.

EPSS

Процентиль: 44%
0.00215
Низкий

4.3 Medium

CVSS3

Уязвимость CVE-2020-10716