Vulnetix
Try Vulnetix Request Demo
CVE-2023-4886 PUBLISHED CVSS 6.699999809265137 MEDIUM

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

EPSS 0.09% · 24.7th percentile

Risk Scores

CVSS v3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.09%
24.7th percentile

Affected Products

VendorProductVersions
Red HatRed Hat Satellite 6.14 for RHEL 80:3.7.0.10-1.el8sat
redhatsatellite6.0
Red HatRed Hat Satellite 6.14 for RHEL 81:3.7.0.5-1.el8sat
Red HatRed Hat Satellite 6.13 for RHEL 80:3.5.1.24-1.el8sat
theforemanforeman0

Timeline

References

Open in Interactive Console →