CVE-2016-4996

—

CVSS 3.0

7.0 high

EPSS

<1%p23

Published

Jul 17, 2017 (Jul 17, 2017)

Modified

Jun 17, 2026

Description

discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, or by clicking Logs on the console.

Vendors: redhat
Products: satellite
Weakness: CWE-255
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.