Description


A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.

References


https://bugzilla.redhat.com/show_bug.cgi?id=1814998

Issue TrackingPermissions RequiredVendor Advisory


https://bugzilla.redhat.com/show_bug.cgi?id=1814998

Issue TrackingPermissions RequiredVendor Advisory

Weaknesses



CWE-285


NVD-CWE-Other

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.5 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-05-27T17:15:07.843Z

4 years ago

Last modified

2024-11-21T03:55:54.960Z

1 year ago