Total vulnerabilities in the database
Spacewalk-backend in Red Hat Network (RHN) Satellite and Proxy 5.4 includes cleartext user passwords in an error message when a system registration XML-RPC call fails, which allows remote administrators to obtain the password by reading (1) the server log and (2) an email.
Software | From | Fixed in |
---|---|---|
redhat / network_proxy | 5.4 | 5.4.x |
redhat / satellite | 5.4 | 5.4.x |