A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the –password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Satellite | Redhat | 6.0 (including) | 6.0 (including) |