CVE-2017-2672: High severity the foreman vulnerability
A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.
Other sources
When images for compute resources (e.g. an OpenStack image) are added/registered in Foreman, the password used to log in is recorded in plain text in the audit log. This may allow users with access to view the audit log to access newly provisioned hosts using the stored credentials.
Upstream bug:
http://projects.theforeman.org/issues/19169
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2672?
CVE-2017-2672 is considered to be of medium severity due to the potential exposure of sensitive information in log files.
How do I fix CVE-2017-2672?
To fix CVE-2017-2672, upgrade to Foreman version 1.15 or later.
What systems are affected by CVE-2017-2672?
CVE-2017-2672 affects Foreman versions prior to 1.15 and Red Hat Satellite 6.3.
What kind of information is leaked in CVE-2017-2672?
CVE-2017-2672 can lead to the exposure of passwords for provisioned systems in the Foreman log files.
Who can exploit CVE-2017-2672?
An attacker with access to the Foreman log files can exploit CVE-2017-2672 to view sensitive information.