CVE-2024-3716

Publication date

2024-06-05 15:05:37

Family

redhat

State

PUBLISHED

Description

A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password.