CVE-2016-4996

low-risk

Published 2017-07-17

discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, or by clicking Logs on the console.

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.0/10 High

LOCAL / HIGH complexity

Affected Products (1)

Satellite

Affected Vendors

Redhat

References (4)

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0336

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1349136

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0336

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1349136

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal