CVE-2017-2672

foreman: Image password leak

Published Jun 21, 2018 CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Description
A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2017-11816 A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 5, 2024, 2:02 PM
Reserved
Dec 1, 2016, 12:00 AM
Status
Modified
Published
Jun 21, 2018, 1:29 PM
Modified
Jun 17, 2026, 1:16 AM
Severity
Moderate
Public date
Apr 4, 2017, 12:00 AM