{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "Proxmox compute resource credential leak to authenticated users", "tracking": { "current_release_date": "2026-08-11T14:53:20+00:00", "generator": { "date": "2026-08-11T14:53:20+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2021-20259", "initial_release_date": "2021-02-24T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T14:53:20+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Satellite 6.15.0", "product": { "name": "Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6" } } }, { "category": "product_name", "name": "Red Hat Satellite 6.16.0", "product": { "name": "Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6.16" } } }, { "category": "product_name", "name": "Red Hat Satellite 6.17.0", "product": { "name": "Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6.17" } } }, { "category": "product_name", "name": "Red Hat Satellite 6.18.0", "product": { "name": "Red Hat Satellite 6.18.0", "product_id": "satellite_6.18", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6.18" } } }, { "category": "product_version", "name": "foreman", "product": { "name": "foreman", "product_id": "foreman", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman" } } }, { "category": "product_version", "name": "foreman-assets", "product": { "name": "foreman-assets", "product_id": "foreman-assets", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-assets" } } }, { "category": "product_version", "name": "foreman-build", "product": { "name": "foreman-build", "product_id": "foreman-build", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-build" } } }, { "category": "product_version", "name": "foreman-cli", "product": { "name": "foreman-cli", "product_id": "foreman-cli", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-cli" } } }, { "category": "product_version", "name": "foreman-console", "product": { "name": "foreman-console", "product_id": "foreman-console", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-console" } } }, { "category": "product_version", "name": "foreman-debug", "product": { "name": "foreman-debug", "product_id": "foreman-debug", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-debug" } } }, { "category": "product_version", "name": "foreman-dynflow-sidekiq", "product": { "name": "foreman-dynflow-sidekiq", "product_id": "foreman-dynflow-sidekiq", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq" } } }, { "category": "product_version", "name": "foreman-ec2", "product": { "name": "foreman-ec2", "product_id": "foreman-ec2", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-ec2" } } }, { "category": "product_version", "name": "foreman-journald", "product": { "name": "foreman-journald", "product_id": "foreman-journald", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-journald" } } }, { "category": "product_version", "name": "foreman-libvirt", "product": { "name": "foreman-libvirt", "product_id": "foreman-libvirt", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-libvirt" } } }, { "category": "product_version", "name": "foreman-openstack", "product": { "name": "foreman-openstack", "product_id": "foreman-openstack", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-openstack" } } }, { "category": "product_version", "name": "foreman-ovirt", "product": { "name": "foreman-ovirt", "product_id": "foreman-ovirt", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-ovirt" } } }, { "category": "product_version", "name": "foreman-pcp", "product": { "name": "foreman-pcp", "product_id": "foreman-pcp", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-pcp" } } }, { "category": "product_version", "name": "foreman-plugin", "product": { "name": "foreman-plugin", "product_id": "foreman-plugin", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-plugin" } } }, { "category": "product_version", "name": "foreman-postgresql", "product": { "name": "foreman-postgresql", "product_id": "foreman-postgresql", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-postgresql" } } }, { "category": "product_version", "name": "foreman-redis", "product": { "name": "foreman-redis", "product_id": "foreman-redis", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-redis" } } }, { "category": "product_version", "name": "foreman-service", "product": { "name": "foreman-service", "product_id": "foreman-service", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-service" } } }, { "category": "product_version", "name": "foreman-telemetry", "product": { "name": "foreman-telemetry", "product_id": "foreman-telemetry", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-telemetry" } } }, { "category": "product_version", "name": "foreman-vmware", "product": { "name": "foreman-vmware", "product_id": "foreman-vmware", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-vmware" } } }, { "category": "product_version", "name": "foreman", "product": { "name": "foreman", "product_id": "foreman.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "foreman as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman" }, "product_reference": "foreman", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman" }, "product_reference": "foreman", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman" }, "product_reference": "foreman", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman" }, "product_reference": "foreman", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-assets as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-assets" }, "product_reference": "foreman-assets", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-assets as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-assets" }, "product_reference": "foreman-assets", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-assets as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-assets" }, "product_reference": "foreman-assets", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-build as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-build" }, "product_reference": "foreman-build", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-build as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-build" }, "product_reference": "foreman-build", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-build as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-build" }, "product_reference": "foreman-build", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-cli as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-cli" }, "product_reference": "foreman-cli", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-cli as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-cli" }, "product_reference": "foreman-cli", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-cli as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-cli" }, "product_reference": "foreman-cli", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-cli as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-cli" }, "product_reference": "foreman-cli", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-console as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-console" }, "product_reference": "foreman-console", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-console as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-console" }, "product_reference": "foreman-console", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-console as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-console" }, "product_reference": "foreman-console", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-debug" }, "product_reference": "foreman-debug", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-debug" }, "product_reference": "foreman-debug", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-debug" }, "product_reference": "foreman-debug", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-debug" }, "product_reference": "foreman-debug", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-dynflow-sidekiq as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-dynflow-sidekiq" }, "product_reference": "foreman-dynflow-sidekiq", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-dynflow-sidekiq as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-dynflow-sidekiq" }, "product_reference": "foreman-dynflow-sidekiq", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-dynflow-sidekiq as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-dynflow-sidekiq" }, "product_reference": "foreman-dynflow-sidekiq", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-dynflow-sidekiq as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-dynflow-sidekiq" }, "product_reference": "foreman-dynflow-sidekiq", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ec2 as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-ec2" }, "product_reference": "foreman-ec2", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ec2 as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-ec2" }, "product_reference": "foreman-ec2", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ec2 as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-ec2" }, "product_reference": "foreman-ec2", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ec2 as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-ec2" }, "product_reference": "foreman-ec2", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-journald as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-journald" }, "product_reference": "foreman-journald", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-journald as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-journald" }, "product_reference": "foreman-journald", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-journald as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-journald" }, "product_reference": "foreman-journald", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-journald as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-journald" }, "product_reference": "foreman-journald", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-libvirt as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-libvirt" }, "product_reference": "foreman-libvirt", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-libvirt as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-libvirt" }, "product_reference": "foreman-libvirt", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-libvirt as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-libvirt" }, "product_reference": "foreman-libvirt", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-libvirt as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-libvirt" }, "product_reference": "foreman-libvirt", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-openstack as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-openstack" }, "product_reference": "foreman-openstack", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-openstack as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-openstack" }, "product_reference": "foreman-openstack", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-openstack as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-openstack" }, "product_reference": "foreman-openstack", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-openstack as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-openstack" }, "product_reference": "foreman-openstack", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ovirt as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-ovirt" }, "product_reference": "foreman-ovirt", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ovirt as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-ovirt" }, "product_reference": "foreman-ovirt", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ovirt as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-ovirt" }, "product_reference": "foreman-ovirt", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-pcp as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-pcp" }, "product_reference": "foreman-pcp", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-pcp as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-pcp" }, "product_reference": "foreman-pcp", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-pcp as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-pcp" }, "product_reference": "foreman-pcp", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-pcp as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-pcp" }, "product_reference": "foreman-pcp", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-plugin as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-plugin" }, "product_reference": "foreman-plugin", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-plugin as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-plugin" }, "product_reference": "foreman-plugin", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-plugin as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-plugin" }, "product_reference": "foreman-plugin", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-postgresql as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-postgresql" }, "product_reference": "foreman-postgresql", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-postgresql as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-postgresql" }, "product_reference": "foreman-postgresql", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-postgresql as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-postgresql" }, "product_reference": "foreman-postgresql", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-postgresql as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-postgresql" }, "product_reference": "foreman-postgresql", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-redis as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-redis" }, "product_reference": "foreman-redis", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-redis as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-redis" }, "product_reference": "foreman-redis", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-redis as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-redis" }, "product_reference": "foreman-redis", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-redis as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-redis" }, "product_reference": "foreman-redis", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-service as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-service" }, "product_reference": "foreman-service", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-service as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-service" }, "product_reference": "foreman-service", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-service as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-service" }, "product_reference": "foreman-service", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-service as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-service" }, "product_reference": "foreman-service", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-telemetry as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-telemetry" }, "product_reference": "foreman-telemetry", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-telemetry as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-telemetry" }, "product_reference": "foreman-telemetry", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-telemetry as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-telemetry" }, "product_reference": "foreman-telemetry", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-telemetry as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-telemetry" }, "product_reference": "foreman-telemetry", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-vmware as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman-vmware" }, "product_reference": "foreman-vmware", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-vmware as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman-vmware" }, "product_reference": "foreman-vmware", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-vmware as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman-vmware" }, "product_reference": "foreman-vmware", "relates_to_product_reference": "rhn_satellite_6.15" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-vmware as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman-vmware" }, "product_reference": "foreman-vmware", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman.src as a component of Red Hat Satellite 6.18.0", "product_id": "satellite_6.18:foreman.src" }, "product_reference": "foreman.src", "relates_to_product_reference": "satellite_6.18" }, { "category": "default_component_of", "full_product_name": { "name": "foreman.src as a component of Red Hat Satellite 6.17.0", "product_id": "rhn_satellite_6.17:foreman.src" }, "product_reference": "foreman.src", "relates_to_product_reference": "rhn_satellite_6.17" }, { "category": "default_component_of", "full_product_name": { "name": "foreman.src as a component of Red Hat Satellite 6.16.0", "product_id": "rhn_satellite_6.16:foreman.src" }, "product_reference": "foreman.src", "relates_to_product_reference": "rhn_satellite_6.16" }, { "category": "default_component_of", "full_product_name": { "name": "foreman.src as a component of Red Hat Satellite 6.15.0", "product_id": "rhn_satellite_6.15:foreman.src" }, "product_reference": "foreman.src", "relates_to_product_reference": "rhn_satellite_6.15" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-20259", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2021-02-24T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhn_satellite_6.15:foreman", "rhn_satellite_6.15:foreman-cli", "rhn_satellite_6.15:foreman-debug", "rhn_satellite_6.15:foreman-dynflow-sidekiq", "rhn_satellite_6.15:foreman-ec2", "rhn_satellite_6.15:foreman-journald", "rhn_satellite_6.15:foreman-libvirt", "rhn_satellite_6.15:foreman-openstack", "rhn_satellite_6.15:foreman-ovirt", "rhn_satellite_6.15:foreman-pcp", "rhn_satellite_6.15:foreman-postgresql", "rhn_satellite_6.15:foreman-redis", "rhn_satellite_6.15:foreman-service", "rhn_satellite_6.15:foreman-telemetry", "rhn_satellite_6.15:foreman-vmware", "rhn_satellite_6.15:foreman.src", "rhn_satellite_6.16:foreman", "rhn_satellite_6.16:foreman-assets", "rhn_satellite_6.16:foreman-build", "rhn_satellite_6.16:foreman-cli", "rhn_satellite_6.16:foreman-console", "rhn_satellite_6.16:foreman-debug", "rhn_satellite_6.16:foreman-dynflow-sidekiq", "rhn_satellite_6.16:foreman-ec2", "rhn_satellite_6.16:foreman-journald", "rhn_satellite_6.16:foreman-libvirt", "rhn_satellite_6.16:foreman-openstack", "rhn_satellite_6.16:foreman-ovirt", "rhn_satellite_6.16:foreman-pcp", "rhn_satellite_6.16:foreman-plugin", "rhn_satellite_6.16:foreman-postgresql", "rhn_satellite_6.16:foreman-redis", "rhn_satellite_6.16:foreman-service", "rhn_satellite_6.16:foreman-telemetry", "rhn_satellite_6.16:foreman-vmware", "rhn_satellite_6.16:foreman.src", "rhn_satellite_6.17:foreman", "rhn_satellite_6.17:foreman-assets", "rhn_satellite_6.17:foreman-build", "rhn_satellite_6.17:foreman-cli", "rhn_satellite_6.17:foreman-console", "rhn_satellite_6.17:foreman-debug", "rhn_satellite_6.17:foreman-dynflow-sidekiq", "rhn_satellite_6.17:foreman-ec2", "rhn_satellite_6.17:foreman-journald", "rhn_satellite_6.17:foreman-libvirt", "rhn_satellite_6.17:foreman-openstack", "rhn_satellite_6.17:foreman-ovirt", "rhn_satellite_6.17:foreman-pcp", "rhn_satellite_6.17:foreman-plugin", "rhn_satellite_6.17:foreman-postgresql", "rhn_satellite_6.17:foreman-redis", "rhn_satellite_6.17:foreman-service", "rhn_satellite_6.17:foreman-telemetry", "rhn_satellite_6.17:foreman-vmware", "rhn_satellite_6.17:foreman.src", "satellite_6.18:foreman", "satellite_6.18:foreman-assets", "satellite_6.18:foreman-build", "satellite_6.18:foreman-cli", "satellite_6.18:foreman-console", "satellite_6.18:foreman-debug", "satellite_6.18:foreman-dynflow-sidekiq", "satellite_6.18:foreman-ec2", "satellite_6.18:foreman-journald", "satellite_6.18:foreman-libvirt", "satellite_6.18:foreman-openstack", "satellite_6.18:foreman-pcp", "satellite_6.18:foreman-plugin", "satellite_6.18:foreman-postgresql", "satellite_6.18:foreman-redis", "satellite_6.18:foreman-service", "satellite_6.18:foreman-telemetry", "satellite_6.18:foreman-vmware", "satellite_6.18:foreman.src" ] } ], "notes": [ { "category": "other", "text": "Red Hat Satellite is not vulnerable to the Proxmox credential leak since the product does not ship the affected foreman_fog_proxmox plugin.", "title": "Statement" }, { "category": "description", "text": "A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "title": "Vulnerability description" } ], "product_status": { "known_not_affected": [ "rhn_satellite_6.15:foreman", "rhn_satellite_6.15:foreman-cli", "rhn_satellite_6.15:foreman-debug", "rhn_satellite_6.15:foreman-dynflow-sidekiq", "rhn_satellite_6.15:foreman-ec2", "rhn_satellite_6.15:foreman-journald", "rhn_satellite_6.15:foreman-libvirt", "rhn_satellite_6.15:foreman-openstack", "rhn_satellite_6.15:foreman-ovirt", "rhn_satellite_6.15:foreman-pcp", "rhn_satellite_6.15:foreman-postgresql", "rhn_satellite_6.15:foreman-redis", "rhn_satellite_6.15:foreman-service", "rhn_satellite_6.15:foreman-telemetry", "rhn_satellite_6.15:foreman-vmware", "rhn_satellite_6.15:foreman.src", "rhn_satellite_6.16:foreman", "rhn_satellite_6.16:foreman-assets", "rhn_satellite_6.16:foreman-build", "rhn_satellite_6.16:foreman-cli", "rhn_satellite_6.16:foreman-console", "rhn_satellite_6.16:foreman-debug", "rhn_satellite_6.16:foreman-dynflow-sidekiq", "rhn_satellite_6.16:foreman-ec2", "rhn_satellite_6.16:foreman-journald", "rhn_satellite_6.16:foreman-libvirt", "rhn_satellite_6.16:foreman-openstack", "rhn_satellite_6.16:foreman-ovirt", "rhn_satellite_6.16:foreman-pcp", "rhn_satellite_6.16:foreman-plugin", "rhn_satellite_6.16:foreman-postgresql", "rhn_satellite_6.16:foreman-redis", "rhn_satellite_6.16:foreman-service", "rhn_satellite_6.16:foreman-telemetry", "rhn_satellite_6.16:foreman-vmware", "rhn_satellite_6.16:foreman.src", "rhn_satellite_6.17:foreman", "rhn_satellite_6.17:foreman-assets", "rhn_satellite_6.17:foreman-build", "rhn_satellite_6.17:foreman-cli", "rhn_satellite_6.17:foreman-console", "rhn_satellite_6.17:foreman-debug", "rhn_satellite_6.17:foreman-dynflow-sidekiq", "rhn_satellite_6.17:foreman-ec2", "rhn_satellite_6.17:foreman-journald", "rhn_satellite_6.17:foreman-libvirt", "rhn_satellite_6.17:foreman-openstack", "rhn_satellite_6.17:foreman-ovirt", "rhn_satellite_6.17:foreman-pcp", "rhn_satellite_6.17:foreman-plugin", "rhn_satellite_6.17:foreman-postgresql", "rhn_satellite_6.17:foreman-redis", "rhn_satellite_6.17:foreman-service", "rhn_satellite_6.17:foreman-telemetry", "rhn_satellite_6.17:foreman-vmware", "rhn_satellite_6.17:foreman.src", "satellite_6.18:foreman", "satellite_6.18:foreman-assets", "satellite_6.18:foreman-build", "satellite_6.18:foreman-cli", "satellite_6.18:foreman-console", "satellite_6.18:foreman-debug", "satellite_6.18:foreman-dynflow-sidekiq", "satellite_6.18:foreman-ec2", "satellite_6.18:foreman-journald", "satellite_6.18:foreman-libvirt", "satellite_6.18:foreman-openstack", "satellite_6.18:foreman-pcp", "satellite_6.18:foreman-plugin", "satellite_6.18:foreman-postgresql", "satellite_6.18:foreman-redis", "satellite_6.18:foreman-service", "satellite_6.18:foreman-telemetry", "satellite_6.18:foreman-vmware", "satellite_6.18:foreman.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-20259" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20259" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-20259" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "baseScore": 6.3, "baseSeverity": "MEDIUM" }, "products": [ "rhn_satellite_6.15:foreman", "rhn_satellite_6.15:foreman-cli", "rhn_satellite_6.15:foreman-debug", "rhn_satellite_6.15:foreman-dynflow-sidekiq", "rhn_satellite_6.15:foreman-ec2", "rhn_satellite_6.15:foreman-journald", "rhn_satellite_6.15:foreman-libvirt", "rhn_satellite_6.15:foreman-openstack", "rhn_satellite_6.15:foreman-ovirt", "rhn_satellite_6.15:foreman-pcp", "rhn_satellite_6.15:foreman-postgresql", "rhn_satellite_6.15:foreman-redis", "rhn_satellite_6.15:foreman-service", "rhn_satellite_6.15:foreman-telemetry", "rhn_satellite_6.15:foreman-vmware", "rhn_satellite_6.15:foreman.src", "rhn_satellite_6.16:foreman", "rhn_satellite_6.16:foreman-assets", "rhn_satellite_6.16:foreman-build", "rhn_satellite_6.16:foreman-cli", "rhn_satellite_6.16:foreman-console", "rhn_satellite_6.16:foreman-debug", "rhn_satellite_6.16:foreman-dynflow-sidekiq", "rhn_satellite_6.16:foreman-ec2", "rhn_satellite_6.16:foreman-journald", "rhn_satellite_6.16:foreman-libvirt", "rhn_satellite_6.16:foreman-openstack", "rhn_satellite_6.16:foreman-ovirt", "rhn_satellite_6.16:foreman-pcp", "rhn_satellite_6.16:foreman-plugin", "rhn_satellite_6.16:foreman-postgresql", "rhn_satellite_6.16:foreman-redis", "rhn_satellite_6.16:foreman-service", "rhn_satellite_6.16:foreman-telemetry", "rhn_satellite_6.16:foreman-vmware", "rhn_satellite_6.16:foreman.src", "rhn_satellite_6.17:foreman", "rhn_satellite_6.17:foreman-assets", "rhn_satellite_6.17:foreman-build", "rhn_satellite_6.17:foreman-cli", "rhn_satellite_6.17:foreman-console", "rhn_satellite_6.17:foreman-debug", "rhn_satellite_6.17:foreman-dynflow-sidekiq", "rhn_satellite_6.17:foreman-ec2", "rhn_satellite_6.17:foreman-journald", "rhn_satellite_6.17:foreman-libvirt", "rhn_satellite_6.17:foreman-openstack", "rhn_satellite_6.17:foreman-ovirt", "rhn_satellite_6.17:foreman-pcp", "rhn_satellite_6.17:foreman-plugin", "rhn_satellite_6.17:foreman-postgresql", "rhn_satellite_6.17:foreman-redis", "rhn_satellite_6.17:foreman-service", "rhn_satellite_6.17:foreman-telemetry", "rhn_satellite_6.17:foreman-vmware", "rhn_satellite_6.17:foreman.src", "satellite_6.18:foreman", "satellite_6.18:foreman-assets", "satellite_6.18:foreman-build", "satellite_6.18:foreman-cli", "satellite_6.18:foreman-console", "satellite_6.18:foreman-debug", "satellite_6.18:foreman-dynflow-sidekiq", "satellite_6.18:foreman-ec2", "satellite_6.18:foreman-journald", "satellite_6.18:foreman-libvirt", "satellite_6.18:foreman-openstack", "satellite_6.18:foreman-pcp", "satellite_6.18:foreman-plugin", "satellite_6.18:foreman-postgresql", "satellite_6.18:foreman-redis", "satellite_6.18:foreman-service", "satellite_6.18:foreman-telemetry", "satellite_6.18:foreman-vmware", "satellite_6.18:foreman.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "rhn_satellite_6.15:foreman", "rhn_satellite_6.15:foreman-cli", "rhn_satellite_6.15:foreman-debug", "rhn_satellite_6.15:foreman-dynflow-sidekiq", "rhn_satellite_6.15:foreman-ec2", "rhn_satellite_6.15:foreman-journald", "rhn_satellite_6.15:foreman-libvirt", "rhn_satellite_6.15:foreman-openstack", "rhn_satellite_6.15:foreman-ovirt", "rhn_satellite_6.15:foreman-pcp", "rhn_satellite_6.15:foreman-postgresql", "rhn_satellite_6.15:foreman-redis", "rhn_satellite_6.15:foreman-service", "rhn_satellite_6.15:foreman-telemetry", "rhn_satellite_6.15:foreman-vmware", "rhn_satellite_6.15:foreman.src", "rhn_satellite_6.16:foreman", "rhn_satellite_6.16:foreman-assets", "rhn_satellite_6.16:foreman-build", "rhn_satellite_6.16:foreman-cli", "rhn_satellite_6.16:foreman-console", "rhn_satellite_6.16:foreman-debug", "rhn_satellite_6.16:foreman-dynflow-sidekiq", "rhn_satellite_6.16:foreman-ec2", "rhn_satellite_6.16:foreman-journald", "rhn_satellite_6.16:foreman-libvirt", "rhn_satellite_6.16:foreman-openstack", "rhn_satellite_6.16:foreman-ovirt", "rhn_satellite_6.16:foreman-pcp", "rhn_satellite_6.16:foreman-plugin", "rhn_satellite_6.16:foreman-postgresql", "rhn_satellite_6.16:foreman-redis", "rhn_satellite_6.16:foreman-service", "rhn_satellite_6.16:foreman-telemetry", "rhn_satellite_6.16:foreman-vmware", "rhn_satellite_6.16:foreman.src", "rhn_satellite_6.17:foreman", "rhn_satellite_6.17:foreman-assets", "rhn_satellite_6.17:foreman-build", "rhn_satellite_6.17:foreman-cli", "rhn_satellite_6.17:foreman-console", "rhn_satellite_6.17:foreman-debug", "rhn_satellite_6.17:foreman-dynflow-sidekiq", "rhn_satellite_6.17:foreman-ec2", "rhn_satellite_6.17:foreman-journald", "rhn_satellite_6.17:foreman-libvirt", "rhn_satellite_6.17:foreman-openstack", "rhn_satellite_6.17:foreman-ovirt", "rhn_satellite_6.17:foreman-pcp", "rhn_satellite_6.17:foreman-plugin", "rhn_satellite_6.17:foreman-postgresql", "rhn_satellite_6.17:foreman-redis", "rhn_satellite_6.17:foreman-service", "rhn_satellite_6.17:foreman-telemetry", "rhn_satellite_6.17:foreman-vmware", "rhn_satellite_6.17:foreman.src", "satellite_6.18:foreman", "satellite_6.18:foreman-assets", "satellite_6.18:foreman-build", "satellite_6.18:foreman-cli", "satellite_6.18:foreman-console", "satellite_6.18:foreman-debug", "satellite_6.18:foreman-dynflow-sidekiq", "satellite_6.18:foreman-ec2", "satellite_6.18:foreman-journald", "satellite_6.18:foreman-libvirt", "satellite_6.18:foreman-openstack", "satellite_6.18:foreman-pcp", "satellite_6.18:foreman-plugin", "satellite_6.18:foreman-postgresql", "satellite_6.18:foreman-redis", "satellite_6.18:foreman-service", "satellite_6.18:foreman-telemetry", "satellite_6.18:foreman-vmware", "satellite_6.18:foreman.src" ] } ], "title": "Proxmox compute resource credential leak to authenticated users" } ] }