medium6.2
CVE-2024-3716
A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter.
Impact
A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Satellite | Version 6.0 |