CVE-2021-3413
published 2021-04-08CVE-2021-3413: A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure…
PriorityP335medium6.3CVSS 3.1
AVNACLPRLUINSUCLILAL
EPSS
0.65%
46.9th percentile
A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | satellite | — | — |
| redhat | satellite | — | — |
| theforeman | foreman_azurerm | < 2.2.0 | 2.2.0 |
CVSS provenance
nvdv3.16.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_redhat6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gphm-f2cq-m9pv: A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2
ghsa_unreviewed·2022-05-24
CVE-2021-3413 [MEDIUM] CWE-200 GHSA-gphm-f2cq-m9pv: A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2
A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Red Hat
Satellite: Azure compute resource secret_key leak to authenticated users
vendor_redhat·2021-02-18·CVSS 6.3
CVE-2021-3413 [MEDIUM] CWE-200 Satellite: Azure compute resource secret_key leak to authenticated users
Satellite: Azure compute resource secret_key leak to authenticated users
A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
A flaw was found in Red Hat Satellite. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Statement: Red Hat Satellite is vulnerable to the compute resource credential leak. Red Hat Product Security has rated
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-04-08
Published