Advisories · Technology
Red Hat Satellite 6.14 for RHEL 8.
Every CVE that names Red Hat Satellite 6.14 for RHEL 8 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
Foreman: read-only access to entire db from templates
- Red Hat Satellite 6.13 for RHEL 8
- Red Hat Satellite 6.14 for RHEL 8
- Information disclosure
- CVSS 9.8 CriticalCritical · CVSS 9+
Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
- Red Hat Satellite 6.13 for RHEL 8
- Red Hat Satellite 6.14 for RHEL 8
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Puppet-foreman: an authentication bypass vulnerability exists in foreman
- Red Hat Satellite 6.13 for RHEL 8
- Red Hat Satellite 6.14 for RHEL 8
- Authentication bypass
- CVSS 6.7 Medium
Foreman: world readable file containing secrets
- Red Hat Satellite 6.13 for RHEL 8
- Red Hat Satellite 6.14 for RHEL 8
- Information disclosure
- CVSS 9.1 CriticalCritical · CVSS 9+
Foreman: arbitrary code execution through templates
- Red Hat Satellite 6.11 for RHEL 7
- Red Hat Satellite 6.11 for RHEL 8
- Command injection
- CVSS 5.4 Medium
Foreman: stored cross-site scripting in host tab
- Red Hat Satellite 6.13 for RHEL 8
- Red Hat Satellite 6.14 for RHEL 8
- Cross-site scripting (XSS)