Lucene search
HistoryAug 16, 2022 - 9:15 p.m.
CVE-2020-10710
security
vulnerability
red hat
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
12.6%
A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.
Affected configurations
Node
theforemanforemanRange<1.24.1.22
| Vendor | Product | Version | CPE |
|---|---|---|---|
| theforeman | foreman | * | cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2020-10710
2022-08-16 00:00:00
prion
prion
Cross site scripting
2022-08-16 21:15:00
redhatcve
redhatcve
CVE-2020-10710
2021-12-10 05:52:19
veracode
veracode
Information Disclosure
2021-12-12 23:17:36
cve
cve
CVE-2020-10710
2022-08-16 21:15:09
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
12.6%
Related for NVD:CVE-2020-10710