| CVE-2016-9593 |
|
发布时间 :2018-04-16 11:29:00 | ||
| 修订时间 :2018-05-23 10:23:25 | ||||
| NMS |
[原文]foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems.
[CNNVD]CNNVD数据暂缺。
[机译]译文暂缺.
- CVSS (基础分值)
| CVSS分值: | 4 | [中等(MEDIUM)] |
| 机密性影响: | PARTIAL | [很可能造成信息泄露] |
| 完整性影响: | NONE | [不会对系统完整性产生影响] |
| 可用性影响: | NONE | [对系统可用性无影响] |
| 攻击复杂度: | LOW | [漏洞利用没有访问限制 ] |
| 攻击向量: | NETWORK | [攻击者不需要获取内网访问权或本地访问权] |
| 身份认证: | SINGLE_INSTANCE | [--] |
- CWE (弱点类目)
| CWE-255 | [凭证管理] |
- CPE (受影响的平台与产品)
| cpe:/a:redhat:satellite:6.0 | |
| cpe:/a:theforeman:foreman:0.1 | |
| cpe:/a:theforeman:foreman:0.2 | |
| cpe:/a:theforeman:foreman:0.3 | |
| cpe:/a:theforeman:foreman:0.4 | |
| cpe:/a:theforeman:foreman:0.4.1 | |
| cpe:/a:theforeman:foreman:1.0 | |
| cpe:/a:theforeman:foreman:1.1 | |
| cpe:/a:theforeman:foreman:1.2.0 | |
| cpe:/a:theforeman:foreman:1.2.0:rc1 | |
| cpe:/a:theforeman:foreman:1.2.0:rc2 | |
| cpe:/a:theforeman:foreman:1.2.1 | |
| cpe:/a:theforeman:foreman:1.2.2 | |
| cpe:/a:theforeman:foreman:1.2.3 | |
| cpe:/a:theforeman:foreman:1.4.0 | |
| cpe:/a:theforeman:foreman:1.4.1 | |
| cpe:/a:theforeman:foreman:1.4.2 | |
| cpe:/a:theforeman:foreman:1.4.3 | |
| cpe:/a:theforeman:foreman:1.4.4 | |
| cpe:/a:theforeman:foreman:1.4.5 | |
| cpe:/a:theforeman:foreman:1.5.0 | |
| cpe:/a:theforeman:foreman:1.5.1 | |
| cpe:/a:theforeman:foreman:1.5.3 | |
| cpe:/a:theforeman:foreman:1.6.0 | |
| cpe:/a:theforeman:foreman:1.6.1 | |
| cpe:/a:theforeman:foreman:1.8.3 | |
| cpe:/a:theforeman:foreman:1.8.4 | |
| cpe:/a:theforeman:foreman:1.9.0 | |
| cpe:/a:theforeman:foreman:1.9.1 | |
| cpe:/a:theforeman:foreman:1.9.2 | |
| cpe:/a:theforeman:foreman:1.9.3 | |
| cpe:/a:theforeman:foreman:1.10.1 | |
| cpe:/a:theforeman:foreman:1.10.2 | |
| cpe:/a:theforeman:foreman:1.10.3 | |
| cpe:/a:theforeman:foreman:1.10.4 | |
| cpe:/a:theforeman:foreman:1.11.0 | |
| cpe:/a:theforeman:foreman:1.11.0:rc1 | |
| cpe:/a:theforeman:foreman:1.11.0:rc2 | |
| cpe:/a:theforeman:foreman:1.11.0:rc3 | |
| cpe:/a:theforeman:foreman:1.11.1 | |
| cpe:/a:theforeman:foreman:1.11.2 | |
| cpe:/a:theforeman:foreman:1.11.3 | |
| cpe:/a:theforeman:foreman:1.11.4 | |
| cpe:/a:theforeman:foreman:1.12.0 | |
| cpe:/a:theforeman:foreman:1.12.1 | |
| cpe:/a:theforeman:foreman:1.12.2 | |
| cpe:/a:theforeman:foreman:1.12.3 | |
| cpe:/a:theforeman:foreman:1.12.4 | |
| cpe:/a:theforeman:foreman:1.13.1 | |
| cpe:/a:theforeman:foreman:1.13.2 | |
| cpe:/a:theforeman:foreman:1.13.3 | |
| cpe:/a:theforeman:foreman:1.13.4 | |
| cpe:/a:theforeman:foreman:1.14.1 | |
| cpe:/a:theforeman:foreman:1.14.2 | |
| cpe:/a:theforeman:foreman:1.14.3 |
- OVAL (用于检测的技术细节)
| 未找到相关OVAL定义 |
- 官方数据库链接
| http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9593 (官方数据源) MITRE |
| http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9593 (官方数据源) NVD |
- 其它链接及资源
|
http://www.securityfocus.com/bid/94985 (VENDOR_ADVISORY) BID 94985 |
|
https://access.redhat.com/errata/RHSA-2018:0336 (VENDOR_ADVISORY) REDHAT RHSA-2018:0336 |
|
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9593 (VENDOR_ADVISORY) CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9593 |
- 漏洞信息
| foreman-debug CVE-2016-9593 Local Information Disclosure Vulnerability | |
| Design Error | 94985 |
| No | Yes |
| 2016-12-20 12:00:00 | 2016-12-21 12:01:00 |
| Pavel Moravec (Red Hat). | |
- 受影响的程序版本
| Theforeman foreman-debug 0 |
- 漏洞讨论
| foreman-debug is prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. |
- 漏洞利用
|
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.
|
- 解决方案
| Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com. |
We can let circumstances rule us, or we can take charge and rule our lives from within.