Every CVE Search/ Get API key

CVE-2020-10710

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat...

4.4 MediumFix available

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.23%Down 0.7 points since Aug 17, 2022
90%50%10%1%

What each source reports

NVD Score used 4.4

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

Record
CVE-2020-10710
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-522
Updated
2026-11-02
CVE List No score

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

Record
CVE-2020-10710
Weakness
CWE-522
Updated
2026-11-02
EUVDEUVD-2020-3140 No score

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

Record
EUVD-2020-3140
Updated
2026-11-03
GitHub AdvisoriesGHSA-h75h-w5qg-cx2h 4.4

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat...

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

Record
GHSA-h75h-w5qg-cx2h
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-522
Updated
2026-11-02
OSVRHBA-2020:3614 5.3

Red Hat Bug Fix Advisory: Satellite 6.7.3 Async Bug Fix Update

Record
RHBA-2020:3614
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ansiblerole-satellite-receptor-installer
Red Hat:satellite_capsule:6.7::el7
 before 0:0.6.6.1-1.el7sat
0:0.6.6.1-1.el7sat
foreman
Red Hat:satellite_capsule:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-debug
Red Hat:satellite_capsule:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-installer
Red Hat:satellite_capsule:6.7::el7
 before 1:1.24.1.22-1.el7sat
1:1.24.1.22-1.el7sat
foreman-installer-katello
Red Hat:satellite_capsule:6.7::el7
 before 1:1.24.1.22-1.el7sat
1:1.24.1.22-1.el7sat
pulp
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
pulp-admin-client
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
pulp-maintenance
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
pulp-nodes-child
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
pulp-nodes-common
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
Show 53 moreShow less
Affected packages
PackageAffectedFixed
pulp-nodes-parent
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
pulp-selinux
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
pulp-server
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-agent-lib
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-bindings
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-client-lib
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-common
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-oid_validation
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-repoauth
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-streamer
Red Hat:satellite_capsule:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
satellite
Red Hat:satellite_capsule:6.7::el7
 before 0:6.7.3-1.el7sat
0:6.7.3-1.el7sat
satellite-capsule
Red Hat:satellite_capsule:6.7::el7
 before 0:6.7.3-1.el7sat
0:6.7.3-1.el7sat
satellite-common
Red Hat:satellite_capsule:6.7::el7
 before 0:6.7.3-1.el7sat
0:6.7.3-1.el7sat
satellite-debug-tools
Red Hat:satellite_capsule:6.7::el7
 before 0:6.7.3-1.el7sat
0:6.7.3-1.el7sat
ansiblerole-satellite-receptor-installer
Red Hat:satellite:6.7::el7
 before 0:0.6.6.1-1.el7sat
0:0.6.6.1-1.el7sat
foreman
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-cli
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-debug
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-ec2
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-gce
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-installer
Red Hat:satellite:6.7::el7
 before 1:1.24.1.22-1.el7sat
1:1.24.1.22-1.el7sat
foreman-installer-katello
Red Hat:satellite:6.7::el7
 before 1:1.24.1.22-1.el7sat
1:1.24.1.22-1.el7sat
foreman-journald
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-libvirt
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-openstack
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-ovirt
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-postgresql
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-rackspace
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-telemetry
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
foreman-vmware
Red Hat:satellite:6.7::el7
 before 0:1.24.1.25-1.el7sat
0:1.24.1.25-1.el7sat
pulp
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
pulp-admin-client
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
pulp-maintenance
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
pulp-selinux
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
pulp-server
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-bindings
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-client-lib
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-common
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-oid_validation
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-repoauth
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-pulp-streamer
Red Hat:satellite:6.7::el7
 before 0:2.21.0.2-1.el7sat
0:2.21.0.2-1.el7sat
python-receptor-satellite
Red Hat:satellite:6.7::el7
 before 0:1.0.1-2.el7sat
0:1.0.1-2.el7sat
python3-receptor-satellite
Red Hat:satellite:6.7::el7
 before 0:1.0.1-2.el7sat
0:1.0.1-2.el7sat
satellite
Red Hat:satellite:6.7::el7
 before 0:6.7.3-1.el7sat
0:6.7.3-1.el7sat
satellite-capsule
Red Hat:satellite:6.7::el7
 before 0:6.7.3-1.el7sat
0:6.7.3-1.el7sat
satellite-cli
Red Hat:satellite:6.7::el7
 before 0:6.7.3-1.el7sat
0:6.7.3-1.el7sat
satellite-common
Red Hat:satellite:6.7::el7
 before 0:6.7.3-1.el7sat
0:6.7.3-1.el7sat
satellite-debug-tools
Red Hat:satellite:6.7::el7
 before 0:6.7.3-1.el7sat
0:6.7.3-1.el7sat
tfm-rubygem-foreman-tasks
Red Hat:satellite:6.7::el7
 before 0:0.17.5.7-1.el7sat
0:0.17.5.7-1.el7sat
tfm-rubygem-foreman_ansible
Red Hat:satellite:6.7::el7
 before 0:4.0.3.7-1.el7sat
0:4.0.3.7-1.el7sat
tfm-rubygem-foreman_remote_execution
Red Hat:satellite:6.7::el7
 before 0:2.0.10.2-1.el7sat
0:2.0.10.2-1.el7sat
tfm-rubygem-foreman_remote_execution-cockpit
Red Hat:satellite:6.7::el7
 before 0:2.0.10.2-1.el7sat
0:2.0.10.2-1.el7sat
tfm-rubygem-katello
Red Hat:satellite:6.7::el7
 before 0:3.14.0.27-1.el7sat
0:3.14.0.27-1.el7sat

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-10710 is a medium vulnerability (CVSS 4.4) in Theforeman Foreman, published August 16, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 13th percentile. Fixed in ansiblerole-satellite-receptor-installer 0:0.6.6.1-1.el7sat.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open