CVE-2023-4886
Fixed in a distro release EPSS <1%CVSS 6.7
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
Products: Red Hat Satellite 6.13 for RHEL 8, Red Hat Satellite 6.14 for RHEL 8
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat satellite 6.13 | foreman | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-cli | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-debug | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-dynflow-sidekiq | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-ec2 | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-journald | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-libvirt | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-openstack | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-ovirt | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-postgresql | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-service | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-telemetry | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | foreman-vmware | 0:3.5.1.24-1.el8sat |
| Red Hat satellite 6.13 | mosquitto | 0:2.0.17-1.el8sat |
| Red Hat satellite 6.13 | mosquitto-debuginfo | 0:2.0.17-1.el8sat |
| Red Hat satellite 6.13 | mosquitto-debugsource | 0:2.0.17-1.el8sat |
| Red Hat satellite 6.14 | createrepo_c | 0:1.0.2-2.el8pc |
| Red Hat satellite 6.14 | createrepo_c-debuginfo | 0:1.0.2-2.el8pc |
| Red Hat satellite 6.14 | createrepo_c-debugsource | 0:1.0.2-2.el8pc |
| Red Hat satellite 6.14 | createrepo_c-libs | 0:1.0.2-2.el8pc |
| Red Hat satellite 6.14 | createrepo_c-libs-debuginfo | 0:1.0.2-2.el8pc |
| Red Hat satellite 6.14 | foreman | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-cli | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-debug | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-dynflow-sidekiq | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-ec2 | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-installer | 1:3.7.0.5-1.el8sat |
| Red Hat satellite 6.14 | foreman-installer-katello | 1:3.7.0.5-1.el8sat |
| Red Hat satellite 6.14 | foreman-journald | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-libvirt | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-openstack | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-ovirt | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-postgresql | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-redis | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-service | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-telemetry | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | foreman-vmware | 0:3.7.0.10-1.el8sat |
| Red Hat satellite 6.14 | pulpcore-selinux | 0:2.0.0-1.el8pc |
| Red Hat satellite 6.14 | python-django-import-export | 0:3.1.0-1.el8pc |
| Red Hat satellite 6.14 | python-gitpython | 0:3.1.40-0.1.el8pc |
| Red Hat satellite 6.14 | python-pulp-rpm | 0:3.19.11-2.el8pc |
| Red Hat satellite 6.14 | python-pulpcore | 0:3.22.19-1.el8pc |
| Red Hat satellite 6.14 | python-urllib3 | 0:1.26.18-0.1.el8pc |
| Red Hat satellite 6.14 | python3-createrepo_c | 0:1.0.2-2.el8pc |
| Red Hat satellite 6.14 | python3-createrepo_c-debuginfo | 0:1.0.2-2.el8pc |
| Red Hat satellite 6.14 | python39-createrepo_c | 0:1.0.2-2.el8pc |
| Red Hat satellite 6.14 | python39-createrepo_c-debuginfo | 0:1.0.2-2.el8pc |
| Red Hat satellite 6.14 | python39-django-import-export | 0:3.1.0-1.el8pc |
| Red Hat satellite 6.14 | python39-gitpython | 0:3.1.40-0.1.el8pc |
| Red Hat satellite 6.14 | python39-pulp-rpm | 0:3.19.11-2.el8pc |
| Red Hat satellite 6.14 | python39-pulpcore | 0:3.22.19-1.el8pc |
| Red Hat satellite 6.14 | python39-urllib3 | 0:1.26.18-0.1.el8pc |
| Red Hat satellite 6.14 | rubygem-actioncable | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-actionmailbox | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-actionmailer | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-actionpack | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-actiontext | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-actionview | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-activejob | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-activemodel | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-activerecord | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-activestorage | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-activesupport | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-foreman_leapp | 0:1.1.0-1.el8sat |
| Red Hat satellite 6.14 | rubygem-foreman_remote_execution | 0:10.1.2-1.el8sat |
| Red Hat satellite 6.14 | rubygem-foreman_remote_execution-cockpit | 0:10.1.2-1.el8sat |
| Red Hat satellite 6.14 | rubygem-katello | 0:4.9.0.18-1.el8sat |
| Red Hat satellite 6.14 | rubygem-rails | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-railties | 0:6.1.7.4-1.el8sat |
| Red Hat satellite 6.14 | rubygem-smart_proxy_remote_execution_ssh | 0:0.10.2-2.el8sat |
| Red Hat satellite 6.14 | satellite | 0:6.14.1-1.el8sat |
| Red Hat satellite 6.14 | satellite-cli | 0:6.14.1-1.el8sat |
| Red Hat satellite 6.14 | satellite-common | 0:6.14.1-1.el8sat |
| Red Hat satellite 6.14 | satellite-convert2rhel-toolkit | 0:1.0.0-1.el8sat |
| Red Hat satellite capsule 6.13 | foreman | 0:3.5.1.24-1.el8sat |
| Red Hat satellite capsule 6.13 | foreman-debug | 0:3.5.1.24-1.el8sat |
| Red Hat satellite capsule 6.13 | mosquitto | 0:2.0.17-1.el8sat |
| Red Hat satellite capsule 6.13 | mosquitto-debuginfo | 0:2.0.17-1.el8sat |
| Red Hat satellite capsule 6.13 | mosquitto-debugsource | 0:2.0.17-1.el8sat |
| Red Hat satellite capsule 6.14 | createrepo_c | 0:1.0.2-2.el8pc |
| Red Hat satellite capsule 6.14 | createrepo_c-debuginfo | 0:1.0.2-2.el8pc |
| Red Hat satellite capsule 6.14 | createrepo_c-debugsource | 0:1.0.2-2.el8pc |
| Red Hat satellite capsule 6.14 | createrepo_c-libs | 0:1.0.2-2.el8pc |
| Red Hat satellite capsule 6.14 | createrepo_c-libs-debuginfo | 0:1.0.2-2.el8pc |
| Red Hat satellite capsule 6.14 | foreman | 0:3.7.0.10-1.el8sat |
| Red Hat satellite capsule 6.14 | foreman-debug | 0:3.7.0.10-1.el8sat |
| Red Hat satellite capsule 6.14 | foreman-installer | 1:3.7.0.5-1.el8sat |
| Red Hat satellite capsule 6.14 | foreman-installer-katello | 1:3.7.0.5-1.el8sat |
| Red Hat satellite capsule 6.14 | pulpcore-selinux | 0:2.0.0-1.el8pc |
| Red Hat satellite capsule 6.14 | python-django-import-export | 0:3.1.0-1.el8pc |
| Red Hat satellite capsule 6.14 | python-gitpython | 0:3.1.40-0.1.el8pc |
| Red Hat satellite capsule 6.14 | python-pulp-rpm | 0:3.19.11-2.el8pc |
| Red Hat satellite capsule 6.14 | python-pulpcore | 0:3.22.19-1.el8pc |
| Red Hat satellite capsule 6.14 | python-urllib3 | 0:1.26.18-0.1.el8pc |
| Red Hat satellite capsule 6.14 | python3-createrepo_c | 0:1.0.2-2.el8pc |
| Red Hat satellite capsule 6.14 | python3-createrepo_c-debuginfo | 0:1.0.2-2.el8pc |
| Red Hat satellite capsule 6.14 | python39-createrepo_c | 0:1.0.2-2.el8pc |
| Red Hat satellite capsule 6.14 | python39-createrepo_c-debuginfo | 0:1.0.2-2.el8pc |
| Red Hat satellite capsule 6.14 | python39-django-import-export | 0:3.1.0-1.el8pc |
| Red Hat satellite capsule 6.14 | python39-gitpython | 0:3.1.40-0.1.el8pc |
| Red Hat satellite capsule 6.14 | python39-pulp-rpm | 0:3.19.11-2.el8pc |
| Red Hat satellite capsule 6.14 | python39-pulpcore | 0:3.22.19-1.el8pc |
| Red Hat satellite capsule 6.14 | python39-urllib3 | 0:1.26.18-0.1.el8pc |
| Red Hat satellite capsule 6.14 | rubygem-smart_proxy_remote_execution_ssh | 0:0.10.2-2.el8sat |
| Red Hat satellite capsule 6.14 | satellite | 0:6.14.1-1.el8sat |
| Red Hat satellite capsule 6.14 | satellite-capsule | 0:6.14.1-1.el8sat |
| Red Hat satellite capsule 6.14 | satellite-common | 0:6.14.1-1.el8sat |
| Red Hat satellite utils 6.13 | foreman | 0:3.5.1.24-1.el8sat |
| Red Hat satellite utils 6.13 | foreman-cli | 0:3.5.1.24-1.el8sat |
| Red Hat satellite utils 6.14 | foreman | 0:3.7.0.10-1.el8sat |
| Red Hat satellite utils 6.14 | foreman-cli | 0:3.7.0.10-1.el8sat |
| Red Hat satellite utils 6.14 | satellite | 0:6.14.1-1.el8sat |
| Red Hat satellite utils 6.14 | satellite-cli | 0:6.14.1-1.el8sat |