{"id":"CVE-2020-10710","aliases":["EUVD-2020-3140","GHSA-h75h-w5qg-cx2h","RHBA-2020:3614"],"status":"published","title":"A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat...","description":"A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0023,"percentile":0.14005,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-522"],"published":"2022-08-16T00:00:00Z","modified":"2026-06-27T10:08:54Z","fixes":[{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"ansiblerole-satellite-receptor-installer","fixed_in":["0:0.6.6.1-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"foreman","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"foreman-debug","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"foreman-installer","fixed_in":["1:1.24.1.22-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"foreman-installer-katello","fixed_in":["1:1.24.1.22-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-admin-client","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-maintenance","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-nodes-child","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-nodes-common","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-nodes-parent","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-selinux","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-server","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-agent-lib","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-bindings","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-client-lib","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-common","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-oid_validation","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-repoauth","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-streamer","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"satellite","fixed_in":["0:6.7.3-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"satellite-capsule","fixed_in":["0:6.7.3-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"satellite-common","fixed_in":["0:6.7.3-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"satellite-debug-tools","fixed_in":["0:6.7.3-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"ansiblerole-satellite-receptor-installer","fixed_in":["0:0.6.6.1-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-cli","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-debug","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-ec2","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-gce","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-installer","fixed_in":["1:1.24.1.22-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-installer-katello","fixed_in":["1:1.24.1.22-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-journald","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-libvirt","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-openstack","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-ovirt","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-postgresql","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-rackspace","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-telemetry","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-vmware","fixed_in":["0:1.24.1.25-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"pulp","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"pulp-admin-client","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"pulp-maintenance","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"pulp-selinux","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"pulp-server","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-bindings","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-client-lib","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-common","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-oid_validation","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-repoauth","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-streamer","fixed_in":["0:2.21.0.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"python-receptor-satellite","fixed_in":["0:1.0.1-2.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"python3-receptor-satellite","fixed_in":["0:1.0.1-2.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"satellite","fixed_in":["0:6.7.3-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"satellite-capsule","fixed_in":["0:6.7.3-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"satellite-cli","fixed_in":["0:6.7.3-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"satellite-common","fixed_in":["0:6.7.3-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"satellite-debug-tools","fixed_in":["0:6.7.3-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"tfm-rubygem-foreman-tasks","fixed_in":["0:0.17.5.7-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"tfm-rubygem-foreman_ansible","fixed_in":["0:4.0.3.7-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"tfm-rubygem-foreman_remote_execution","fixed_in":["0:2.0.10.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"tfm-rubygem-foreman_remote_execution-cockpit","fixed_in":["0:2.0.10.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.7::el7","package":"tfm-rubygem-katello","fixed_in":["0:3.14.0.27-1.el7sat"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"ansiblerole-satellite-receptor-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.6.1-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.1.22-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.1.22-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-maintenance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-nodes-child","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-nodes-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-nodes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-agent-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.3-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.3-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.3-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.7::el7","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.3-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"ansiblerole-satellite-receptor-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.6.1-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.1.22-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.1.22-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-rackspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.1.25-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"pulp-maintenance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21.0.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"python-receptor-satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"python3-receptor-satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.3-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.3-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.3-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.3-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.3-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"tfm-rubygem-foreman-tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.17.5.7-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"tfm-rubygem-foreman_ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3.7-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"tfm-rubygem-foreman_remote_execution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.10.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"tfm-rubygem-foreman_remote_execution-cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.10.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.7::el7","package":"tfm-rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.27-1.el7sat"}]}]}],"products":[{"vendor":"theforeman","product":"foreman"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816747","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10710","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-h75h-w5qg-cx2h"},{"url":"https://access.redhat.com/errata/RHBA-2020:3614","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862236","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862277","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_3614.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10710","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-10710","description":"A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.","status":"published","published":"2022-08-16T00:00:00Z","modified":"2024-08-04T11:06:11.148Z","cwes":["CWE-522"],"updated_at":"2026-11-02T14:35:48.213211Z"}],"euvd":[{"id":"EUVD-2020-3140","description":"A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.","status":"published","published":"2022-08-16T00:00:00Z","modified":"2024-08-04T11:06:11Z","updated_at":"2026-11-03T03:07:49.454544Z"}],"ghsa":[{"id":"GHSA-h75h-w5qg-cx2h","title":"A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat...","description":"A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.","status":"published","published":"2022-08-17T00:00:16Z","modified":"2023-01-29T05:06:32Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:46:02.943866Z"}],"nvd":[{"id":"CVE-2020-10710","description":"A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.","status":"published","published":"2022-08-16T21:15:09.3Z","modified":"2026-06-17T02:48:17.75Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:06:46.951463Z"}],"osv":[{"id":"RHBA-2020:3614","title":"Red Hat Bug Fix Advisory: Satellite 6.7.3 Async Bug Fix Update","status":"published","published":"2024-09-16T04:44:01Z","modified":"2026-06-27T10:08:54Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"}]}}