| Package | Affected versions | Patched versions |
|---|---|---|
| satellite | = 6.0 | |
| foreman | < 3.8.0 | 3.8.0 |
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free