Project

General

Profile

Actions
Copy link

Bug #31937

closed

CVE-2021-20256 foreman: BMC controller credential leak via API

Added by Evgeni Golov about 3 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Evgeni Golov
Category:
Security
Target version:
2.5.0
Difficulty:
Triaged:
No
Bugzilla link:
1930927
Pull request:
https://github.com/theforeman/foreman/pull/8349
Fixed in Releases:
2.5.0
Found in Releases:
Red Hat JIRA:

Description

A password leak was identified on Foreman which will expose BMC password in plaintext through the host API.

Actions
Copy link
 #1

Updated by Evgeni Golov about 3 years ago

  • Subject changed from CVE-2021-20256 foreman: BMC controller credential leak via API to CVE-2021-20256 foreman: BMC controller credential leak via API
  • Assignee set to Evgeni Golov
  • Target version set to 2.4.0
Actions
Copy link
 #2

Updated by The Foreman Bot about 3 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/8349 added
Actions
Copy link
 #3

Updated by The Foreman Bot about 3 years ago

  • Fixed in Releases 2.5.0 added
Actions
Copy link
 #4

Updated by Evgeni Golov about 3 years ago

  • Status changed from Ready For Testing to Closed
Actions
Copy link
 #5

Updated by Tomer Brisker about 3 years ago

  • Target version changed from 2.4.0 to 2.5.0
Actions
Copy link

Also available in: Atom PDF