CVE-2020-10710

2022-08-1600:00:00

CWE-522

redhat

www.cve.org

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "foreman-installer",
    "versions": [
      {
        "version": "foreman-installer 1.24.1.22",
        "status": "affected"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1816747