Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-3590

Опубликовано: 08 июн. 2021
Источник: redhat
CVSS3: 8.8

Описание

A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Отчет

Red Hat Satellite is vulnerable to the compute profile credential leak for Azure. Red Hat Product Security has rated this flaw as having a security impact of Low. Please refer to https://access.redhat.com/security/updates/classification for clarification on the scoring.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Satellite 6tfm-rubygem-foreman_azure_rmFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=1969258foreman: azure compute profile credential leak to authenticated users

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 8.8
debian
больше 3 лет назад

A flaw was found in Foreman project. A credential leak was identified ...

CVSS3: 8.8
github
больше 3 лет назад

A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

8.8 High

CVSS3