CVE-2020-10716: Medium severity redhat Satellite vulnerability
A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foremanansible versions before 4.0.3.4.
Other sources
The "User input" entry from Job Invocation may contain plaintext password or other sensitive data. As a result, anyone who could view the job invocation could see it.
The fix was to restrict the ability to view Job Invocation to users to are entitle to execute it.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-10716?
CVE-2020-10716 is a vulnerability found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted, allowing a malicious user to search for passwords and sensitive data.
How does CVE-2020-10716 affect Red Hat Satellite?
CVE-2020-10716 affects Red Hat Satellite 6.7 and Red Hat Satellite Capsule 6.7.
What is the severity of CVE-2020-10716?
CVE-2020-10716 has a severity rating of medium with a CVSS score of 6.5.
How can I fix CVE-2020-10716?
To fix CVE-2020-10716, upgrade to tfm-rubygem-foreman_ansible version 4.0.3.4 or apply the necessary updates from Red Hat.
Where can I find more information about CVE-2020-10716?
More information about CVE-2020-10716 can be found in the references provided: [1], [2], [3].