Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4886
HistoryOct 03, 2023 - 3:15 p.m.

Information disclosure

2023-10-0315:15:00
PRIOn knowledge base
www.prio-n.com
5
sensitive data exposure
foreman
world-readable
server.xml
keystore
truststore
candlepin

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat’s server.xml file, which contain passwords to candlepin’s keystore and truststore, were found to be world readable.

CPENameOperatorVersion
satelliteeq6.0
foremanlt3.8.0

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%