Vulnerabilities > CVE-2023-4886

CVSS 4.4 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

theforeman

redhat

NVD

Published: 2023-10-03

Updated: 2024-03-01

Summary

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

Vulnerable Configurations

Part	Description	Count
Application	Theforeman Theforeman Foreman - Theforeman Foreman 0.1 Theforeman Foreman 0.2 Theforeman Foreman 0.3 Theforeman Foreman 0.4 Theforeman Foreman 0.4.1 Theforeman Foreman 0.4.2 Theforeman Foreman 1.0 Theforeman Foreman 1.0.1 Theforeman Foreman 1.1 Theforeman Foreman 1.2.0 Theforeman Foreman 1.2.1 Theforeman Foreman 1.2.2 Theforeman Foreman 1.2.3 Theforeman Foreman 1.3.0 Theforeman Foreman 1.3.1 Theforeman Foreman 1.3.2 Theforeman Foreman 1.4.0 Theforeman Foreman 1.4.1 Theforeman Foreman 1.4.2 Theforeman Foreman 1.4.3 Theforeman Foreman 1.4.4 Theforeman Foreman 1.4.5 Theforeman Foreman 1.5.0 Theforeman Foreman 1.5.1 Theforeman Foreman 1.5.2 Theforeman Foreman 1.5.3 Theforeman Foreman 1.6.0 Theforeman Foreman 1.6.1 Theforeman Foreman 1.6.3 Theforeman Foreman 1.7.0 Theforeman Foreman 1.7.1 Theforeman Foreman 1.7.2 Theforeman Foreman 1.7.3 Theforeman Foreman 1.7.4 Theforeman Foreman 1.7.5 Theforeman Foreman 1.8.0 Theforeman Foreman 1.8.1 Theforeman Foreman 1.8.2 Theforeman Foreman 1.8.3 Theforeman Foreman 1.8.4 Theforeman Foreman 1.9.0 Theforeman Foreman 1.9.1 Theforeman Foreman 1.9.2 Theforeman Foreman 1.9.3 Theforeman Foreman 1.10.0 Theforeman Foreman 1.10.1 Theforeman Foreman 1.10.2 Theforeman Foreman 1.10.3 Theforeman Foreman 1.10.4 Theforeman Foreman 1.11.0 Theforeman Foreman 1.11.1 Theforeman Foreman 1.11.2 Theforeman Foreman 1.11.3 Theforeman Foreman 1.11.4 Theforeman Foreman 1.12.0 Theforeman Foreman 1.12.1 Theforeman Foreman 1.12.2 Theforeman Foreman 1.12.3 Theforeman Foreman 1.12.4 Theforeman Foreman 1.13.0 Theforeman Foreman 1.13.1 Theforeman Foreman 1.13.2 Theforeman Foreman 1.13.3 Theforeman Foreman 1.13.4 Theforeman Foreman 1.14.0 Theforeman Foreman 1.14.1 Theforeman Foreman 1.14.2 Theforeman Foreman 1.14.3 Theforeman Foreman 1.15.0 Theforeman Foreman 1.15.1 Theforeman Foreman 1.15.2 Theforeman Foreman 1.15.3 Theforeman Foreman 1.15.4 Theforeman Foreman 1.15.5 Theforeman Foreman 1.15.6 Theforeman Foreman 1.15.7 Theforeman Foreman 1.16.0 Theforeman Foreman 1.16.1 Theforeman Foreman 1.16.2 Theforeman Foreman 1.17.0 Theforeman Foreman 1.17.1 Theforeman Foreman 1.17.2 Theforeman Foreman 1.17.3 Theforeman Foreman 1.17.4 Theforeman Foreman 1.18.0 Theforeman Foreman 1.18.1 Theforeman Foreman 1.18.2 Theforeman Foreman 1.18.3 Theforeman Foreman 1.19.0 Theforeman Foreman 1.19.1 Theforeman Foreman 1.20.0 Theforeman Foreman 1.20.1 Theforeman Foreman 1.20.2 Theforeman Foreman 1.20.3 Theforeman Foreman 1.21.0 Theforeman Foreman 1.21.1 Theforeman Foreman 1.21.2 Theforeman Foreman 1.21.3 Theforeman Foreman 1.22.0 Theforeman Foreman 1.23.0 Theforeman Foreman 1.24.0 Theforeman Foreman 1.24.1 Theforeman Foreman 1.24.1.22 Theforeman Foreman 1.24.2 Theforeman Foreman 1.24.3 Theforeman Foreman 2.0.0 Theforeman Foreman 2.0.1 Theforeman Foreman 2.0.2 Theforeman Foreman 2.0.3 Theforeman Foreman 2.1.0 Theforeman Foreman 2.1.1 Theforeman Foreman 2.1.2 Theforeman Foreman 2.1.3 Theforeman Foreman 2.1.4 Theforeman Foreman 2.2.0 Theforeman Foreman 2.2.1 Theforeman Foreman 2.2.2 Theforeman Foreman 2.2.3 Theforeman Foreman 2.3.0 Theforeman Foreman 2.3.1 Theforeman Foreman 2.3.2 Theforeman Foreman 2.3.3 Theforeman Foreman 2.3.4 Theforeman Foreman 2.3.5 Theforeman Foreman 2.4.0 Theforeman Foreman 2.5.0 Theforeman Foreman 2.5.1 Theforeman Foreman 2.5.2 Theforeman Foreman 2.5.3 Theforeman Foreman 2.5.4 Theforeman Foreman 3.0.0 Theforeman Foreman 3.0.1 Theforeman Foreman 3.0.2 Theforeman Foreman 3.1.0 Theforeman Foreman 3.1.1 Theforeman Foreman 3.1.2 Theforeman Foreman 3.1.3 Theforeman Foreman 3.2.0 Theforeman Foreman 3.2.1 Theforeman Foreman 3.3.0 Theforeman Foreman 3.3.1 Theforeman Foreman 3.4.0 Theforeman Foreman 3.4.1 Theforeman Foreman 3.5.0 Theforeman Foreman 3.5.1 Theforeman Foreman 3.5.2 Theforeman Foreman 3.5.3 Theforeman Foreman 3.6.0 Theforeman Foreman 3.6.1 Theforeman Foreman 3.6.2 Theforeman Foreman 3.7.0	283
Application	Redhat Redhat Satellite 6.0	1

Vulnerabilities > CVE-2023-4886 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2023-4886"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2023-4886