PT-2017-8642 · Foreman · Foreman

Thom Carlin · Published 2017-07-14 · Updated 2023-02-13 · CVE-2016-4996

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 6.2

Description The issue allows local users with access to the system journal to obtain the root password by reading the system journal or by clicking Logs on the console, when the ssh service has been enabled on discovered nodes and discovery-debug is used to log in. This occurs because the root password is displayed in plaintext in the system journal.

Recommendations For versions prior to 6.2, consider disabling the ssh service on discovered nodes or restricting access to the system journal to minimize the risk of exploitation. As a temporary workaround, avoid using the discovery-debug feature until a patch is available.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2016-4996

RHSA-2018:0336

Affected Products

Foreman

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-4996 · Security Note
• https://access.redhat.com/errata/RHSA-2018:0336 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4996 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1349136 · Note