CVE-2019-3891 | BDVDB-2026-115183 Detail

Description#

It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching package updates, thus preventing all Satellite hosts from accessing those updates.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-04-12Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.