Passwords for various components are being stored in a plain text format inside logs of Red Hat Satellite 6.
Issue
- When
satellite-installer
orforeman-maintain
gets executed, it logs password for various components in plain text format inside/var/log/foreman-maintain/foreman-maintain.log
and/var/log/foreman-installer/satellite.log
files.
Environment
- Red Hat Satellite 6.
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.