description: A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.
problem types: CWE-522
affected:
{
vendor: n/a
product: foreman-installer
versions:
version: foreman-installer 1.24.1.22, status: affected
}