Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-20256

Опубликовано: 19 фев. 2021
Источник: redhat
CVSS3: 6.3
EPSS Низкий

Описание

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Отчет

Red Hat Satellite is vulnerable to the BMC controller credential leak through the compute host API. Red Hat Product Security has rated this flaw as having a security impact of Moderate. Please refer to https://access.redhat.com/security/updates/classification for clarification on the scoring.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=1930926Satellite: BMC controller credential leak via API

EPSS

Процентиль: 31%
0.00119
Низкий

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
nvd
почти 5 лет назад

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 5.3
github
больше 3 лет назад

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

EPSS

Процентиль: 31%
0.00119
Низкий

6.3 Medium

CVSS3