Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-14335

Опубликовано: 07 сент. 2020
Источник: redhat
CVSS3: 5.8
EPSS Низкий

Описание

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=1858302foreman: world-readable OMAPI secret through the ISC DHCP server

EPSS

Процентиль: 29%
0.00103
Низкий

5.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
nvd
больше 4 лет назад

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability.

CVSS3: 5.5
github
больше 3 лет назад

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability.

EPSS

Процентиль: 29%
0.00103
Низкий

5.8 Medium

CVSS3