CVEvulnerability
CVE-2016-4996
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-07-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, or by clicking Logs on the console.
Affected configurations
• redhat satellite 6.3
Related
Weakness · not in database (1)
References
- https://access.redhat.com/errata/RHSA-2018:0336 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1349136 Issue Tracking, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0336 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1349136 Issue Tracking, Third Party Advisory