foreman-installer

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2024-3716Foreman-installer: candlepin database password being leaked to local users via the process listMEDIUM 6.20.2 %
CVE-2020-10710foreman-installer 1.24.1.22A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This MEDIUM 4.40.2 %