CVE-2021-20259CWE-200

A flaw was found in the Foreman project

published June 7, 2021

CVSS
—
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Versions before foreman_fog_proxmox 0.13.1 are affected

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2021-06-07T20:31Z
EPSS history
Timeline
  • 07 JUN 20:31Z
    A flaw was found in the Foreman project
    cvelistv5