CVE-2018-1097: Red Hat Satellite

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and password used to connect to the compute resource.

Affected products

• Red Hat Satellite: version 6.4 only
• Theforeman Foreman: before 1.6.1 (fixed in 1.6.1)

Published 2018-04-04. Last modified 2026-06-17.