CVE-2021-20256

Summary

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected Software

VendorProductVersion RangeStatus
n/aRed Hat SatelliteAs shipped in Red Hat Satellite 6affected

Weaknesses

  • CWE-200: CWE-200

ADP Enrichment

CVE Program Container

Additional References

References