Description
A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | foreman-installer | — | — |
| Red Hat | Red Hat Satellite 6 | — | — |
References
- https://access.redhat.com/security/cve/CVE-2024-3716 vdb-entry
- RHBZ#2274755 issue-tracking