foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debugs logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Foreman | Theforeman | * | 1.15.0 (excluding) |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | candlepin-0:2.1.14-1.el7 | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-0:1.15.6.34-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-bootloaders-redhat-0:201801241201-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-discovery-image-0:3.4.4-1 | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-installer-1:1.15.6.8-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-proxy-0:1.15.6.4-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-selinux-0:1.15.6.2-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | hiera-0:1.3.1-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-0:3.4.5-15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-certs-tools-0:2.4.0-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-client-bootstrap-0:1.5.1-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-installer-base-0:3.4.5.26-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-selinux-0:3.0.2-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | kobo-0:0.5.1-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-0:2.13.4.6-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-docker-0:2.4.1-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-katello-0:1.0.2-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-ostree-0:1.2.1.1-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-puppet-0:2.13.4-3.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-rpm-0:2.13.4.8-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | puppet-foreman_scap_client-0:0.3.16-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | python-zope-interface-0:4.0.5-4.el7 | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | redhat-access-insights-puppet-0:0.0.9-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-foreman_scap_client-0:0.3.0-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-kafo-0:2.0.2-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-kafo_parsers-0:0.1.6-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-kafo_wizards-0:0.0.1-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_dhcp_remote_isc-0:0.0.2.1-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_discovery-0:1.0.4-3.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_discovery_image-0:1.0.9-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_dynflow-0:0.1.10-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_openscap-0:0.6.9-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_pulp-0:1.3.0-1.git.0.b5c2768.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_remote_execution_ssh-0:0.1.6-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-tilt-0:1.3.7-2.git.0.3b416c9.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | satellite-0:6.3.0-23.0.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | satellite-installer-0:6.3.0.12-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-bastion-0:5.1.1.4-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_bootdisk-0:10.0.2.2-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_discovery-0:9.1.5.3-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_docker-0:3.1.0.3-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_hooks-0:0.3.14-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_openscap-0:0.7.11-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman-redhat_access-0:2.0.13-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_remote_execution-0:1.3.7.2-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_remote_execution_core-0:1.0.6-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman-tasks-0:0.9.6.4-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman-tasks-core-0:0.1.8-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_templates-0:5.0.1-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_theme_satellite-0:1.0.4.16-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_virt_who_configure-0:0.1.9-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli-0:0.11.0.1-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_csv-0:2.3.0-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman-0:0.11.0.5-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_admin-0:0.0.8-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_bootdisk-0:0.1.3.3-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_discovery-0:1.0.0-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_docker-0:0.0.6-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_openscap-0:0.1.5-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_remote_execution-0:0.0.6-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_tasks-0:0.0.12-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_virt_who_configure-0:0.0.3-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_katello-0:0.11.3.5-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-katello-0:3.4.5.58-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-ovirt_provision_plugin-0:1.0.2-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-smart_proxy_dynflow_core-0:0.1.10-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | candlepin-0:2.1.14-1.el7 | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-0:1.15.6.34-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-bootloaders-redhat-0:201801241201-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-discovery-image-0:3.4.4-1 | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-installer-1:1.15.6.8-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-proxy-0:1.15.6.4-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | foreman-selinux-0:1.15.6.2-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | hiera-0:1.3.1-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-0:3.4.5-15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-certs-tools-0:2.4.0-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-client-bootstrap-0:1.5.1-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-installer-base-0:3.4.5.26-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-selinux-0:3.0.2-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | kobo-0:0.5.1-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-0:2.13.4.6-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-docker-0:2.4.1-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-katello-0:1.0.2-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-ostree-0:1.2.1.1-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-puppet-0:2.13.4-3.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | pulp-rpm-0:2.13.4.8-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | puppet-foreman_scap_client-0:0.3.16-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | python-zope-interface-0:4.0.5-4.el7 | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | redhat-access-insights-puppet-0:0.0.9-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-foreman_scap_client-0:0.3.0-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-kafo-0:2.0.2-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-kafo_parsers-0:0.1.6-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-kafo_wizards-0:0.0.1-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_dhcp_remote_isc-0:0.0.2.1-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_discovery-0:1.0.4-3.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_discovery_image-0:1.0.9-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_dynflow-0:0.1.10-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_openscap-0:0.6.9-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_pulp-0:1.3.0-1.git.0.b5c2768.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-smart_proxy_remote_execution_ssh-0:0.1.6-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | rubygem-tilt-0:1.3.7-2.git.0.3b416c9.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | satellite-0:6.3.0-23.0.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | satellite-installer-0:6.3.0.12-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-bastion-0:5.1.1.4-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_bootdisk-0:10.0.2.2-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_discovery-0:9.1.5.3-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_docker-0:3.1.0.3-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_hooks-0:0.3.14-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_openscap-0:0.7.11-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman-redhat_access-0:2.0.13-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_remote_execution-0:1.3.7.2-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_remote_execution_core-0:1.0.6-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman-tasks-0:0.9.6.4-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman-tasks-core-0:0.1.8-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_templates-0:5.0.1-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_theme_satellite-0:1.0.4.16-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-foreman_virt_who_configure-0:0.1.9-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli-0:0.11.0.1-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_csv-0:2.3.0-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman-0:0.11.0.5-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_admin-0:0.0.8-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_bootdisk-0:0.1.3.3-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_discovery-0:1.0.0-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_docker-0:0.0.6-2.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_openscap-0:0.1.5-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_remote_execution-0:0.0.6-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_tasks-0:0.0.12-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_foreman_virt_who_configure-0:0.0.3-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-hammer_cli_katello-0:0.11.3.5-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-katello-0:3.4.5.58-1.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-ovirt_provision_plugin-0:1.0.2-1.fm1_15.el7sat | * |
Red Hat Satellite 6.3 for RHEL 7 | RedHat | tfm-rubygem-smart_proxy_dynflow_core-0:0.1.10-1.fm1_15.el7sat | * |