7.0high
CVE-2016-4996
discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
7.0
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 24%
Public exploits
0
none known
Summary
discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, or by clicking Logs on the console.
Exploit prediction (EPSS)
0.31% probability of exploitation in the next 30 days, higher than 24% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.0 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 1.9 | AV:L/AC:M/Au:N/C:P/I:N/A:N |
Classification
- Weakness
- CWE-255 Credentials Management Errors
References
- access.redhat.com /errata/RHSA-2018:0336 · vendor-advisory, x_refsource_REDHAT, x_transferred
- bugzilla.redhat.com /show_bug.cgi?id=1349136 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-4996
- NVD: CVE-2016-4996
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.