CVE-2021-20256: Infoleak
A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Other sources
A password leak was identified on Red Hat Satellite which will expose BMC password in plaintext through the compute host API.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-20256?
CVE-2021-20256 is a vulnerability found in Red Hat Satellite where the BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission.
What is the severity of CVE-2021-20256?
The severity of CVE-2021-20256 is medium with a CVSS score of 5.3.
How does CVE-2021-20256 impact the affected software?
CVE-2021-20256 may lead to data confidentiality and integrity issues as well as system availability.
Which version of Red Hat Satellite is affected by CVE-2021-20256?
Red Hat Satellite version 6.0 is affected by CVE-2021-20256.
How can I fix CVE-2021-20256?
To fix CVE-2021-20256, it is recommended to apply the relevant security patches provided by Red Hat.