4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
8.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
61.0%
foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug’s logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems.
[
{
"product": "foreman-debug",
"vendor": "unspecified",
"versions": [
{
"status": "affected",
"version": "foreman-debug 1.15.0"
}
]
}
]
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
8.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
61.0%