277 matches found
CVE-2021-3585
A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager...
openstack-tripleo-heat-templates 安全漏洞
openstack-tripleo-heat-templates is a set of templates and tools for building Heat templates for OpenStack deployment. A security vulnerability exists in openstack-tripleo-heat-templates that stems from the presence of plain passwords from RHSM in its logs during the deployment of OSP13 using...
CVE-2021-3585: Exposure of Sensitive Information to an Unauthorized Actor
A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager...
PT-2022-10474 · Openstack · Openstack-Tripleo-Heat-Templates
Name of the Vulnerable Software and Affected Versions: openstack-tripleo-heat-templates affected versions not specified Description: A flaw was found in openstack-tripleo-heat-templates where plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager...
subscription-manager bug fix and enhancement update
An update is available for subscription-manager. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The subscription-manager packages provide programs and libraries...
CVE-2022-1662
In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This could allow unauthorized local users to view the password via the process list while convert2rhel is running. However, this...
Default credentials
In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This could allow unauthorized local users to view the password via the process list while convert2rhel is running. However, this...
CVE-2022-1662
In CVE-2022-1662, the issue is that an Ansible playbook (ansible/run-convert2rhel.yml) for convert2rhel passes the Red Hat Subscription Manager password via the CLI, enabling unauthorized local users to view the password in the process list during execution. This affects convert2rhel when the ups...
CVE-2022-1662
In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This could allow unauthorized local users to view the password via the process list while convert2rhel is running. However, this...
CVE-2021-41415
Subscription-Manager v1.0 /main.js has a cross-site scripting XSS vulnerability in the machineDetail parameter...
CVE-2021-41415
Subscription-Manager v1.0 /main.js has a cross-site scripting XSS vulnerability in the machineDetail parameter...
CVE-2021-41415
Subscription-Manager v1.0 /main.js has a cross-site scripting XSS vulnerability in the machineDetail parameter...
Cross site scripting
Subscription-Manager v1.0 /main.js has a cross-site scripting XSS vulnerability in the machineDetail parameter...
CVE-2021-41415
Subscription-Manager v1.0 /main.js has a cross-site scripting XSS vulnerability in the machineDetail parameter...
CVE-2021-41415
CVE-2021-41415 affects Subscription-Manager v1.0, involving a cross-site scripting (XSS) flaw in the machineDetail parameter of /main.js. Multiple sources indicate the root cause is insufficient filtering/escaping in the parameter, enabling injected scripts. The CVE details in NVD/NVD-derived rec...
Subscription-Manager 跨站脚本漏洞
Subscription-Manager is a subscription management system by the individual developer of China's JiYouRan youranreus. A cross-site scripting vulnerability exists in Subscription-Manager v1.0, which stems from a lack of filtering and escaping of the machineDetail parameter in /main.js...
CVE-2021-41415: Improper Neutralization of Input During Web Page Generation
Subscription-Manager v1.0 /main.js has a cross-site scripting XSS vulnerability in the machineDetail parameter...
Information Disclosure
convert2rhel is vulnerable to information disclosure. The vulnerability exists when the library passes the red hat account password to the subscription manager via the command line, which could allow unauthorized users locally on the machine to view the password via the process command line via...
CVE-2022-1662
A flaw was found in convert2rhel, where an Ansible playbook named ansible/run-convert2rhel.yml passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This flaw allows unauthorized local users to view the password via the process list while convert2rhel is running...