CVE-2023-4886

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.

References

Affected packages

Git / github.com/theforeman/smart-proxy

Affected ranges

Type

GIT

Repo

https://github.com/theforeman/smart-proxy

Events

Introduced

Fixed

4fabeb7ee4e869aa3f96aa1f484ee6a714bda19d

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.8.0"
        }
    ]
}

Affected versions

0.*

0.1

0.2

0.2rc2

0.3

0.3.1

1.*

1.0

1.0RC1

1.0RC2

1.1

1.1RC1

1.1RC2

1.1RC3

3.*

3.8.0-rc1

3.8.0-rc2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-4886.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.0"
            }
        ]
    }
]