Vulnetix
Try Vulnetix Request Demo
CVE-2020-10716 PUBLISHED CVSS 4 MEDIUM

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.

EPSS 0.16% · 36.3th percentile

Risk Scores

CVSS v2.0
4
EPSS Score
0.16%
36.3th percentile

Affected Products

VendorProductVersions
redhatsatellite_capsule6.7
redhatsatellite6.7
n/arubygem-foreman_ansibletfm-rubygem-foreman_ansible 4.0.3.4
theforemanforeman_ansible0

Timeline

References

Open in Interactive Console →