CVE-2023-4886

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/errata/RHSA-2023:7851
https://access.redhat.com/errata/RHSA-2024:1061
https://access.redhat.com/security/cve/CVE-2023-4886	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2230135	Issue Tracking Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*

History

01 Mar 2024, 03:15

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2024:1061 -

14 Dec 2023, 22:15

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2023:7851 -

05 Oct 2023, 00:56

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 4.4
CPE		cpe:2.3:a:redhat:satellite:6.0:::::::* cpe:2.3:a:theforeman:foreman::::::::
CWE		NVD-CWE-noinfo
References	~~(MISC) https://access.redhat.com/security/cve/CVE-2023-4886 -~~	(MISC) https://access.redhat.com/security/cve/CVE-2023-4886 - Vendor Advisory
References	~~(MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2230135 -~~	(MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2230135 - Issue Tracking, Vendor Advisory
First Time		Redhat satellite Theforeman foreman Redhat Theforeman

03 Oct 2023, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-10-03 15:15

Updated : 2024-03-01 03:15

NVD link : CVE-2023-4886

Mitre link : CVE-2023-4886

CVE.ORG link : CVE-2023-4886

JSON object : View

Products Affected

theforeman

foreman

redhat

satellite

CWE

NVD-CWE-noinfo CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2023-4886", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.8}, {"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2023-10-03T15:15:40.737", "references": [{"url": "https://access.redhat.com/errata/RHSA-2023:7851", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1061", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2023-4886", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2230135", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad de exposici\u00f3n de informaci\u00f3n confidencial en Foreman. Se descubri\u00f3 que el contenido del archivo server.xml de Tomcat, que contiene contrase\u00f1as para el almac\u00e9n de claves y el almac\u00e9n de confianza de Candlepin, es legible en todo el mundo."}], "lastModified": "2024-03-01T03:15:06.487", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13E27457-9E93-45C1-907F-7E5852B4FD1F", "versionEndExcluding": "3.8.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "848C92A9-0677-442B-8D52-A448F2019903"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}