CVE-2017-2672

    Dashboard / Vulnerabilities / CVE-2017-2672

    CVE-2017-2672

    Published: 21 Jun 2018Last Modified: 8 Jul 2026

    Summary:

    Details: A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.

    References: http://www.securityfocus.com/bid/97526, https://access.redhat.com/errata/RHSA-2018:0336, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2672, https://projects.theforeman.org/issues/19169

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -c952c782adac290fd5a1145090380424665f5fe1

    Affected versions

    1.15.0-RC2
    1.15.0-RC1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High