Description
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat Satellite 6.13 for RHEL 8
Default version status: affected
0:3.5.1.24-1.el8sat to < *unaffected
Red Hat Red Hat Satellite 6.14 for RHEL 8
Default version status: affected
0:3.7.0.10-1.el8sat to < *unaffected
Red Hat Red Hat Satellite 6.14 for RHEL 8
Default version status: affected
1:3.7.0.5-1.el8sat to < *unaffected