CVE-2016-4996

discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal…

published July 14, 2017

CVSS
—
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, or by clicking Logs on the console.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.3th percentile
Published
2017-07-14T20:00Z
EPSS history
Timeline
  • 14 JUL 20:00Z
    discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal…
    cvelistv5