CVE-2017-2672
Medium
Description
A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.
SeverityMedium
CVSS6.5
Exploit probability67. percentile1.2%
Product
Foreman
PublishedJun 21, 2018
First seenJun 21, 2018
Weakness typeCWE-312CWE-312
How to fix
Update
- theforeman foreman1.15 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| theforeman foreman | v < 1.15 | 1.15 |
| redhat satellite | 6.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.