CVE-2021-20256CWE-200

A flaw was found in Red Hat Satellite

published February 23, 2021

CVSS
—
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2021-02-23T22:31Z
EPSS history
Timeline
  • 23 FEB 22:31Z
    A flaw was found in Red Hat Satellite
    cvelistv5