CVE-2020-14334

foreman: unauthorized cache read on RPM-based installations through local user

Published Jul 31, 2020 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-6481 A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 4, 2024, 12:39 PM
Reserved
Jun 17, 2020, 12:00 AM
Status
Modified
Published
Jul 31, 2020, 1:15 PM
Modified
Jun 17, 2026, 2:54 AM
Severity
Important
Public date
Jul 28, 2020, 1:30 PM