CVE-2016-4996
Last modified
CVE-2016-4996 is a vulnerability of currently unknown severity. discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, or by clicking Logs on the console.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, or by clicking Logs on the console.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Satellite | 6.3 |
References
- https://access.redhat.com/errata/RHSA-2018:0336Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1349136Issue Tracking, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0336Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1349136Issue Tracking, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-4996?
How severe is CVE-2016-4996?
How do I fix CVE-2016-4996?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-4990Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2016-4991Input passed to the Pdf() function is shell escaped and pass…9.8
- CVE-2016-4992389 Directory Server in Red Hat Enterprise Linux Desktop 6 t…
- CVE-2016-4993CRLF injection vulnerability in the Undertow web server in W…
- CVE-2016-4994Use-after-free vulnerability in the xcf_load_image function …7.8
- CVE-2016-4995Foreman before 1.11.4 and 1.12.x before 1.12.1 does not prop…
- CVE-2016-4997The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsoc…7.8
- CVE-2016-4998The IPT_SO_SET_REPLACE setsockopt implementation in the netf…
- CVE-2016-4999SQL injection vulnerability in the getStringParameterSQL met…9.8
- CVE-2016-5000The XLSX2CSV example in Apache POI before 3.14 allows remote…
- CVE-2016-5001This is an information disclosure vulnerability in Apache Ha…
- CVE-2016-5002XML external entity (XXE) vulnerability in the Apache XML-RP…
Are you affected by CVE-2016-4996?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST