CVE-2024-3716: Red Hat Satellite

Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password.

Affected products

• Red Hat Satellite: version 6.0 only

Published 2024-06-05. Last modified 2026-06-17.