Lucene search

K
cveMITRECVE-2023-4886
HistoryOct 03, 2023 - 2:24 p.m.

CVE-2023-4886

2023-10-0314:24:56
MITRE
web.nvd.nist.gov
97
cve-2023-4886
information security
foreman
vulnerability
sensitive information exposure
tomcat
nvd

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.6%

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat’s server.xml file, which contain passwords to candlepin’s keystore and truststore, were found to be world readable.

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.6%