CVE-2024-3716

Name of the Vulnerable Software and Affected Versions Red Hat Satellite foreman-installer (affected versions not specified)

Description The issue is related to insufficient protection of service data in the foreman-installer component of Red Hat Satellite. It allows an attacker to obtain a password from the process list when the puppet-candlepin is invoked with the cpdb command and the --password parameter. This can be exploited by an attacker to gain unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.