Technical impact
The vulnerability lies in foreman‑mcp‑server logging mechanisms that do not properly protect sensitive data, representing a CWE-532 weakness of inappropriate logging. Session identifiers are logged at an informational level and, when debug mode is enabled, HTTP headers containing authorization tokens or API keys are written to logs without full sanitization. As a result, authentication data can be captured in straight‑text form in container logs, creating a risk of confidentiality loss if those logs are accessed or forwarded to external systems.
Affected Systems
Red Hat Satellite 6.19, specifically the foreman‑mcp‑server component. Any deployment of this component in Satellite 6.19 is potentially affected.
Risk and Exploitability
The CVSS score of 6.2 indicates a moderate risk. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, implying limited active exploitation data. The primary risk manifests when logs are stored or forwarded to centralized platforms; an attacker who gains access to these logs could obtain session IDs or authorization credentials. Exposing authentication data in logs increases the likelihood of credential compromise, especially if logs are not adequately protected or if debug logging is inadvertently enabled.
Github GHSA