CVE-2016-9593 in foreman-debug

सारांश

द्वारा MITRE

foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems.

Be aware that VulDB is the high quality source for vulnerability data.

• जिम्मेदार: Red Hat, Inc.
• आरक्षित करना: 23/11/2016
• प्रकटीकरण: 16/04/2018
• संयम: स्वीकृत
• प्रविष्टि: VDB-116245
• CPE: तैयार
• CWE: CWE-255 (पुष्टि की गई)
• CVSS: 8.8 (NVD)
• EPSS: 0.01023
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Government, Agriculture, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-9593
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-9593
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-9593/