CVE-2024-3716 — Foreman-installer: candlepin database password being leaked to local users via the process list
A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attack…
Published: 2024-06-05 · CVSS: 6.2 · CVSS 3.1
A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7