What’s Vulnerable › Vulnerabilities

CVE-2021-3590

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-22 · updated 2026-06-17
• Weakness: CWE-200

Description

A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected products

• Red Hat Satellite 6: 6.0
• foreman: from 1.6.0

References

• https://access.redhat.com/security/cve/CVE-2021-3590
• https://bugzilla.redhat.com/show_bug.cgi?id=1969258
• https://access.redhat.com/security/cve/CVE-2021-3590
• https://bugzilla.redhat.com/show_bug.cgi?id=1969258

Get alerted when CVE-2021-3590 or the next vulnerability affects your stack