CVE-2018-1097

State: Published
Severity: Not scored
Published: Apr 4, 2018
Updated: Aug 5, 2024
Reserved: Dec 4, 2017

Description

A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and password used to connect to the compute resource.

Scores

The record has no CVSS score.

Weaknesses

CWE-200

Affected Products

Product	Versions
foremanForeman Project	before 1.16.1Affected

References

https://github.com/theforeman/foreman/pull/5369
https://bugzilla.redhat.com/show_bug.cgi?id=1561723
RHSA-2018:2927vendor-advisory
https://projects.theforeman.org/issues/22546

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.