A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.
| Software | From | Fixed in |
|---|---|---|
| redhat / satellite | 6.7 | 6.7.x |
| redhat / satellite_capsule | 6.7 | 6.7.x |
| theforeman / foreman_ansible | - | 4.0.3.4 |