CVE-2021-3413: Infoleak
First published: Thu Feb 18 2021(Updated: )
A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/tfm-rubygem-foreman_azure_rm | <2.2.0 | 2.2.0 |
| Theforeman Foreman Azurerm | <2.2.0 | |
| Redhat Satellite | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-3413?
CVE-2021-3413 is a vulnerability found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm before version 2.2.0.
What is the severity of CVE-2021-3413?
The severity of CVE-2021-3413 is medium, with a CVSS score of 6.3.
What is the impact of CVE-2021-3413?
The highest threat from CVE-2021-3413 is to data confidentiality and integrity.
How can I fix CVE-2021-3413?
To fix CVE-2021-3413, update to version 2.2.0 or later of tfm-rubygem-foreman_azure_rm.
Where can I find more information about CVE-2021-3413?
More information about CVE-2021-3413 can be found at the following references: [link1](https://access.redhat.com/security/updates/classification), [link2](https://access.redhat.com/errata/RHSA-2021:4702), [link3](https://bugzilla.redhat.com/show_bug.cgi?id=1930352).
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-3413
- agent/software-canonical-lookup
- vendor/theforeman
- canonical/theforeman foreman azurerm
- vendor/redhat
- canonical/redhat satellite
- version/redhat satellite/6.0
- package-manager/redhat