Test ID:	1.3.6.1.4.1.25623.1.0.107147
Category:	Web application abuses
Title:	Foreman CVE-2017-2672 Information Disclosure Vulnerability
Summary:	Foreman is prone to an information disclosure; vulnerability.
Description:	Summary: Foreman is prone to an information disclosure vulnerability. Vulnerability Insight: When images for compute resources (e.g. an OpenStack image) are added/registered in Foreman, the password used to log in is recorded in plain text in the audit log. This may allow users with access to view the audit log to access newly provisioned hosts using the stored credentials. Vulnerability Impact: Successfully exploiting this issue may allow an attacker to gain access to sensitive information that may aid in further attacks. Affected Software/OS: Foreman version 1.4 through 1.15.4. Solution: Update to version 1.16.0 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2672 BugTraq ID: 97526 http://www.securityfocus.com/bid/97526 RedHat Security Advisories: RHSA-2018:0336 https://access.redhat.com/errata/RHSA-2018:0336 Common Vulnerability Exposure (CVE) ID: CVE-2017-7535 BugTraq ID: 99604 http://www.securityfocus.com/bid/99604 http://seclists.org/oss-sec/2017/q3/521
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.