CVE-2023-4886CWE-200

Foreman: world readable file containing secrets

Medium · published October 3, 2023

CVSS v3.1
6.7
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-10-03T14:24Z
EPSS history
Timeline
  • 03 OCT 14:24Z
    Foreman: world readable file containing secrets
    cvelistv5