What’s Vulnerable › Vulnerabilities

CVE-2016-4996

• Severity: high (CVSS 7.0 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-17 · updated 2026-06-17
• Weakness: CWE-255

Description

discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, or by clicking Logs on the console.

Affected products

• Red Hat Satellite 6: 6.3

References

• https://access.redhat.com/errata/RHSA-2018:0336
• https://bugzilla.redhat.com/show_bug.cgi?id=1349136
• https://access.redhat.com/errata/RHSA-2018:0336
• https://bugzilla.redhat.com/show_bug.cgi?id=1349136

Get alerted when CVE-2016-4996 or the next vulnerability affects your stack