CVE-2023-4886
Foreman: world readable file containing secrets
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
6.7
Foreman: world readable file containing secrets
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
- Record
CVE-2023-4886- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2023-54725
6.7
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
- Record
EUVD-2023-54725- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-r2mj-49jv-4jq7
6.7
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server...
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
- Record
GHSA-r2mj-49jv-4jq7- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
6.7
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
- Record
CVE-2023-4886- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
6.7
Foreman: world readable file containing secrets
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
- Record
CVE-2023-4886- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVRHSA-2023:7851
6.7
Red Hat Security Advisory: Satellite 6.14.1 Async Security Update
- Record
RHSA-2023:7851- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:1061
7.5
Red Hat Security Advisory: Red Hat Satellite 6 security and bug fix update
- Record
RHSA-2024:1061- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
foremanRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-debugRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-installerRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 1:3.7.0.5-1.el8sat | 1:3.7.0.5-1.el8sat |
foreman-installer-katelloRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 1:3.7.0.5-1.el8sat | 1:3.7.0.5-1.el8sat |
foremanRed Hat:satellite_utils:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-cliRed Hat:satellite_utils:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foremanRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-cliRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-debugRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-dynflow-sidekiqRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
Show 103 moreShow less
| Package | Affected | Fixed |
|---|---|---|
foreman-ec2Red Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-installerRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 1:3.7.0.5-1.el8sat | 1:3.7.0.5-1.el8sat |
foreman-installer-katelloRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 1:3.7.0.5-1.el8sat | 1:3.7.0.5-1.el8sat |
foreman-journaldRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-libvirtRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-openstackRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-ovirtRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-postgresqlRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-redisRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-serviceRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-telemetryRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
foreman-vmwareRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.7.0.10-1.el8sat | 0:3.7.0.10-1.el8sat |
rubygem-actionpackRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
python-gitpythonRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.1.40-0.1.el8pc | 0:3.1.40-0.1.el8pc |
python39-gitpythonRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.1.40-0.1.el8pc | 0:3.1.40-0.1.el8pc |
python-gitpythonRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.1.40-0.1.el8pc | 0:3.1.40-0.1.el8pc |
python39-gitpythonRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.1.40-0.1.el8pc | 0:3.1.40-0.1.el8pc |
createrepo_cRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
createrepo_c-debuginfoRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
createrepo_c-debugsourceRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
createrepo_c-libsRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
createrepo_c-libs-debuginfoRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
pulpcore-selinuxRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:2.0.0-1.el8pc | 0:2.0.0-1.el8pc |
python-django-import-exportRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.1.0-1.el8pc | 0:3.1.0-1.el8pc |
python-pulp-rpmRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.19.11-2.el8pc | 0:3.19.11-2.el8pc |
python-pulpcoreRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.22.19-1.el8pc | 0:3.22.19-1.el8pc |
python-urllib3Red Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.26.18-0.1.el8pc | 0:1.26.18-0.1.el8pc |
python3-createrepo_cRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
python3-createrepo_c-debuginfoRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
python39-createrepo_cRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
python39-createrepo_c-debuginfoRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
python39-django-import-exportRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.1.0-1.el8pc | 0:3.1.0-1.el8pc |
python39-pulp-rpmRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.19.11-2.el8pc | 0:3.19.11-2.el8pc |
python39-pulpcoreRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.22.19-1.el8pc | 0:3.22.19-1.el8pc |
python39-urllib3Red Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.26.18-0.1.el8pc | 0:1.26.18-0.1.el8pc |
rubygem-smart_proxy_remote_execution_sshRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:0.10.2-2.el8sat | 0:0.10.2-2.el8sat |
satelliteRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.14.1-1.el8sat | 0:6.14.1-1.el8sat |
satellite-capsuleRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.14.1-1.el8sat | 0:6.14.1-1.el8sat |
satellite-commonRed Hat:satellite_capsule:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.14.1-1.el8sat | 0:6.14.1-1.el8sat |
satelliteRed Hat:satellite_utils:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.14.1-1.el8sat | 0:6.14.1-1.el8sat |
satellite-cliRed Hat:satellite_utils:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.14.1-1.el8sat | 0:6.14.1-1.el8sat |
createrepo_cRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
createrepo_c-debuginfoRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
createrepo_c-debugsourceRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
createrepo_c-libsRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
createrepo_c-libs-debuginfoRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
pulpcore-selinuxRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:2.0.0-1.el8pc | 0:2.0.0-1.el8pc |
python-django-import-exportRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.1.0-1.el8pc | 0:3.1.0-1.el8pc |
python-pulp-rpmRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.19.11-2.el8pc | 0:3.19.11-2.el8pc |
python-pulpcoreRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.22.19-1.el8pc | 0:3.22.19-1.el8pc |
python-urllib3Red Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.26.18-0.1.el8pc | 0:1.26.18-0.1.el8pc |
python3-createrepo_cRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
python3-createrepo_c-debuginfoRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
python39-createrepo_cRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
python39-createrepo_c-debuginfoRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.2-2.el8pc | 0:1.0.2-2.el8pc |
python39-django-import-exportRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.1.0-1.el8pc | 0:3.1.0-1.el8pc |
python39-pulp-rpmRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.19.11-2.el8pc | 0:3.19.11-2.el8pc |
python39-pulpcoreRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:3.22.19-1.el8pc | 0:3.22.19-1.el8pc |
python39-urllib3Red Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.26.18-0.1.el8pc | 0:1.26.18-0.1.el8pc |
rubygem-actioncableRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-actionmailboxRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-actionmailerRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-actiontextRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-actionviewRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-activejobRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-activemodelRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-activerecordRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-activestorageRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-activesupportRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-foreman_leappRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.1.0-1.el8sat | 0:1.1.0-1.el8sat |
rubygem-foreman_remote_executionRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:10.1.2-1.el8sat | 0:10.1.2-1.el8sat |
rubygem-foreman_remote_execution-cockpitRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:10.1.2-1.el8sat | 0:10.1.2-1.el8sat |
rubygem-katelloRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:4.9.0.18-1.el8sat | 0:4.9.0.18-1.el8sat |
rubygem-railsRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-railtiesRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.4-1.el8sat | 0:6.1.7.4-1.el8sat |
rubygem-smart_proxy_remote_execution_sshRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:0.10.2-2.el8sat | 0:0.10.2-2.el8sat |
satelliteRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.14.1-1.el8sat | 0:6.14.1-1.el8sat |
satellite-cliRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.14.1-1.el8sat | 0:6.14.1-1.el8sat |
satellite-commonRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:6.14.1-1.el8sat | 0:6.14.1-1.el8sat |
satellite-convert2rhel-toolkitRed Hat:satellite:6.14::el8 From an advisory covering 5 CVEs |
before 0:1.0.0-1.el8sat | 0:1.0.0-1.el8sat |
foremanRed Hat:satellite_capsule:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foremanRed Hat:satellite_utils:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foremanRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
mosquittoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 5 CVEs |
before 0:2.0.17-1.el8sat | 0:2.0.17-1.el8sat |
mosquitto-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 5 CVEs |
before 0:2.0.17-1.el8sat | 0:2.0.17-1.el8sat |
mosquitto-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 5 CVEs |
before 0:2.0.17-1.el8sat | 0:2.0.17-1.el8sat |
mosquittoRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:2.0.17-1.el8sat | 0:2.0.17-1.el8sat |
mosquitto-debuginfoRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:2.0.17-1.el8sat | 0:2.0.17-1.el8sat |
mosquitto-debugsourceRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:2.0.17-1.el8sat | 0:2.0.17-1.el8sat |
foreman-debugRed Hat:satellite_capsule:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-cliRed Hat:satellite_utils:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-cliRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-debugRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-dynflow-sidekiqRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-ec2Red Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-journaldRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-libvirtRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-openstackRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-ovirtRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-postgresqlRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-serviceRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-telemetryRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
foreman-vmwareRed Hat:satellite:6.13::el8 From an advisory covering 5 CVEs |
before 0:3.5.1.24-1.el8sat | 0:3.5.1.24-1.el8sat |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-4886 is a medium vulnerability (CVSS 6.7) in Theforeman Foreman, published October 3, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. No source names a fixed version.
References
access.redhat.com/errata/RHSA-2023:7851
access.redhat.com/errata/RHSA-2024:1061
access.redhat.com/security/cve/CVE-2023-4886
bugzilla.redhat.com/show_bug.cgi?id=2230135
nvd.nist.gov/vuln/detail/CVE-2023-4886
github.com/advisories/GHSA-r2mj-49jv-4jq7
Show 65 moreShow less
access.redhat.com/downloads/content/package-browser
github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4886.json
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_satellite/6.14/html/upgrading_red_hat_satellite_to_6.14/index
bugzilla.redhat.com/show_bug.cgi?id=2217785
bugzilla.redhat.com/show_bug.cgi?id=2246840
bugzilla.redhat.com/show_bug.cgi?id=2247040
bugzilla.redhat.com/show_bug.cgi?id=2250342
bugzilla.redhat.com/show_bug.cgi?id=2250343
bugzilla.redhat.com/show_bug.cgi?id=2250344
bugzilla.redhat.com/show_bug.cgi?id=2250345
bugzilla.redhat.com/show_bug.cgi?id=2250349
bugzilla.redhat.com/show_bug.cgi?id=2250350
bugzilla.redhat.com/show_bug.cgi?id=2250351
bugzilla.redhat.com/show_bug.cgi?id=2250352
bugzilla.redhat.com/show_bug.cgi?id=2251799
bugzilla.redhat.com/show_bug.cgi?id=2254080
bugzilla.redhat.com/show_bug.cgi?id=2254085
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7851.json
cve.org/CVERecord?id=CVE-2023-4886
access.redhat.com/security/cve/CVE-2023-28362
cve.org/CVERecord?id=CVE-2023-28362
nvd.nist.gov/vuln/detail/CVE-2023-28362
github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-28362.yml
access.redhat.com/security/cve/CVE-2023-41040
cve.org/CVERecord?id=CVE-2023-41040
nvd.nist.gov/vuln/detail/CVE-2023-41040
github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c
access.redhat.com/security/cve/CVE-2023-43804
bugzilla.redhat.com/show_bug.cgi?id=2242493
cve.org/CVERecord?id=CVE-2023-43804
nvd.nist.gov/vuln/detail/CVE-2023-43804
access.redhat.com/security/cve/CVE-2023-45803
cve.org/CVERecord?id=CVE-2023-45803
nvd.nist.gov/vuln/detail/CVE-2023-45803
github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9
github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4
rfc-editor.org/rfc/rfc9110.html
access.redhat.com/documentation/en-us/red_hat_satellite/6.13/html/upgrading_and_updating_red_hat_satellite/index
access.redhat.com/security/vulnerabilities/RHSB-2023-003
bugzilla.redhat.com/show_bug.cgi?id=2145254
bugzilla.redhat.com/show_bug.cgi?id=2236882
bugzilla.redhat.com/show_bug.cgi?id=2257299
bugzilla.redhat.com/show_bug.cgi?id=2257300
bugzilla.redhat.com/show_bug.cgi?id=2257302
bugzilla.redhat.com/show_bug.cgi?id=2257314
bugzilla.redhat.com/show_bug.cgi?id=2257316
bugzilla.redhat.com/show_bug.cgi?id=2260526
bugzilla.redhat.com/show_bug.cgi?id=2264354
bugzilla.redhat.com/show_bug.cgi?id=2264918
bugzilla.redhat.com/show_bug.cgi?id=2265149
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1061.json
access.redhat.com/security/cve/CVE-2022-4130
cve.org/CVERecord?id=CVE-2022-4130
nvd.nist.gov/vuln/detail/CVE-2022-4130
access.redhat.com/security/cve/CVE-2023-0809
cve.org/CVERecord?id=CVE-2023-0809
nvd.nist.gov/vuln/detail/CVE-2023-0809
github.com/eclipse/mosquitto/commit/6113eac95a9df634fbc858be542c4a0456bfe7b9
access.redhat.com/security/cve/CVE-2023-3592
cve.org/CVERecord?id=CVE-2023-3592
nvd.nist.gov/vuln/detail/CVE-2023-3592
access.redhat.com/security/cve/CVE-2023-28366
cve.org/CVERecord?id=CVE-2023-28366
nvd.nist.gov/vuln/detail/CVE-2023-28366