CVE-2017-2672CWE-312

A flaw was found in foreman before version 1.15 in the logging of adding and registering images

Medium · published June 21, 2018

CVSS v3.0
6.5
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01205 · 68.1th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2018-06-21T13:00Z
EPSS history
Timeline
  • 21 JUN 13:00Z
    A flaw was found in foreman before version 1.15 in the logging of adding and registering images
    cvelistv5