A sensitive information exposure vulnerability was found in foreman. Contents of tomcats server.xml file, which contain passwords to candlepins keystore and truststore, were found to be world readable.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Foreman | Theforeman | * | 3.8.0 (excluding) |