CVE-2021-20260: Infoleak
A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Other sources
A password leak was identified on Foreman project which will expose password in plaintext through Foreman Datacenter plugin.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-20260?
CVE-2021-20260 is a vulnerability found in the Foreman project's Datacenter plugin that exposes the password through the API to an authenticated local attacker with view_hosts permission.
What is the severity of CVE-2021-20260?
CVE-2021-20260 has a severity rating of 7.8 (high).
How does CVE-2021-20260 impact system security?
CVE-2021-20260 poses a threat to data confidentiality and integrity as well as system availability.
What is the affected software for CVE-2021-20260?
The affected software for CVE-2021-20260 is Theforeman Foreman.
Where can I find more information about CVE-2021-20260?
You can find more information about CVE-2021-20260 at the following references: - [CVE-2021-20260 on Red Hat](https://access.redhat.com/security/cve/cve-2021-20260) - [Bugzilla Report for CVE-2021-20260](https://bugzilla.redhat.com/show_bug.cgi?id=1932181)