Red Hat Satellite 6.16 for RHEL 8 vulnerabilities
45 known vulnerabilities in Red Hat Satellite 6.16 for RHEL 8 from Red Hat. 45 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Red Hat Satellite 6.16 for RHEL 8: Improper Certificate Validation
A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Sat
- 7.5 High severity
urllib3: Improper Handling of Highly Compressed Data (Data Amplification)
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decodin
- 8.0 High severity
Foreman: Improper Neutralization of Special Elements used in an OS Command
A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of comma
- 9.8 Critical severity
Red Hat Satellite 6.13 for RHEL 8: Improper Authentication
An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.0, due to the puppet-pulpcore configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restriction
- 9.8 Critical severity
Red Hat Satellite 6.13 for RHEL 8: Improper Authentication
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on under