CVE-2018-1097

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-04-04 · updated 2026-06-17
Weakness: CWE-200

Description

A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and password used to connect to the compute resource.

Affected products

Red Hat Satellite 6: 6.4
foreman: before 1.6.1 — fixed in 1.6.1

How to fix

Upgrade to a fixed version: foreman 1.6.1. Check the vendor advisory for mitigations.

References

https://access.redhat.com/errata/RHSA-2018:2927
https://bugzilla.redhat.com/show_bug.cgi?id=1561723
https://github.com/theforeman/foreman/pull/5369
https://projects.theforeman.org/issues/22546
https://access.redhat.com/errata/RHSA-2018:2927
https://bugzilla.redhat.com/show_bug.cgi?id=1561723
https://github.com/theforeman/foreman/pull/5369
https://projects.theforeman.org/issues/22546

Get alerted when CVE-2018-1097 or the next vulnerability affects your stack