CVE-2016-9593 MEDIUM

CVE-2016-9593

Vendor Unspecified

Product foreman-debug

Weakness CWE-522 · Insufficiently protected credentials

Published April 16, 2018

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

4.7/10

Attack vector Local

Attack complexity High

Privileges required Low

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems.

Key dates

02Disclosure timeline

April 16, 2018 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2016-9593 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/522.html

Related vulnerabilities

04Related CVE

CVE-2025-66029 Open OnDemand affected by Apache proxy passing sensitive headers CVE-2023-4328 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux CVE-2020-5400 Cloud Controller logs environment variables from app manifests CVE-2025-52549 Predictable root linux password generation CVE-2019-10214