CVE-2020-10710CWE-522

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer

published August 16, 2022

CVSS
—
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.1th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2022-08-16T00:00Z
EPSS history
Timeline
  • 16 AUG 00:00Z
    A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer
    cvelistv5