CVE-2023-4886 (published 2023-10-03T14:24:56.342Z)
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
Affected products: Vendor: n/a
Product: foreman
Versions: 3.8.0