| Package | Affected versions | Patched versions |
|---|---|---|
| satellite | = 6.0 |
A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free