Back to feed
EUVD-2021-26897 · Published Aug 22, 2022
A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Technologies
Theforeman ForemanRedhat Satellite
Weaknesses
CWE-200CWE-319
CVSS scores
- v3.18.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Credential Access Discovery Collection
References
Potentially impacted assets
See if this affects your attack surface
