What is CVE-2016-4996?

CVE-2016-4996 is a high-severity vulnerability in Redhat Enterprise Linux Server, classified under CWE-255. CVSS score: 7.0/10. Published 2017-07-17.

How severe is CVE-2016-4996?

High severity. CVSS v3 base score is 7.0 out of 10.

Vulnerability in Redhat Enterprise Linux Server

CVE-2016-4996

discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, or by clicking Logs on the console.

EPSS: 0.003 (23.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Redhat Enterprise_linux_server — versions 7.0
Redhat Satellite — versions 6.3
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2016-4996?: CVE-2016-4996 is a high-severity vulnerability in Redhat Enterprise Linux Server, classified under CWE-255. CVSS score: 7.0/10. Published 2017-07-17.
How severe is CVE-2016-4996?: High severity. CVSS v3 base score is 7.0 out of 10.