CVE-2019-3891

CVE-2019-3891 is a critical vulnerability affecting Red Hat Satellite 6.4, where a world-readable log file exposed Candlepin database credentials. A local attacker could leverage these credentials to modify the database, disrupting package updates for all connected Satellite hosts. With a CVSS score of 7.8 (High), this vulnerability has a local attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.