Red Hat Satellite 6.15 for RHEL 8 vulnerabilities
4 known vulnerabilities in Red Hat Satellite 6.15 for RHEL 8 from Red Hat. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.0 High severity
Foreman: Improper Neutralization of Special Elements used in an OS Command
A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of comma
- 9.8 Critical severity
Red Hat Satellite 6.13 for RHEL 8: Improper Authentication
An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.0, due to the puppet-pulpcore configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restriction
- 9.8 Critical severity
Red Hat Satellite 6.13 for RHEL 8: Improper Authentication
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on under
- 7.5 High severity
An arithmetic overflow flaw was found in Satellite when creating a new personal access token.
An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integ