Design/Logic Flaw

2022-08-2616:15:00

PRIOn knowledge base

www.prio-n.com

foreman

datacenter plugin

api

password exposure

data confidentiality

data integrity

system availability

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.