Advisories · Technology
Red Hat Satellite 6.15 for RHEL 8.
Every CVE that names Red Hat Satellite 6.15 for RHEL 8 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.0 Medium
Foreman: satellite: graphql api permission bypass leads to information disclosure
- Foreman
- Red Hat Satellite 6.15 for RHEL 8
- Broken access control
- CVSS 8.0 High
Foreman: os command injection via ct_location and fcct_location parameters
- Foreman
- Red Hat Satellite 6.15 for RHEL 8
- Command injection
- CVSS 6.3 Medium
Foreman: read-only access to entire db from templates
- Red Hat Satellite 6.13 for RHEL 8
- Red Hat Satellite 6.14 for RHEL 8
- Information disclosure
- CVSS 9.8 CriticalCritical · CVSS 9+
Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
- Red Hat Satellite 6.13 for RHEL 8
- Red Hat Satellite 6.14 for RHEL 8
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Puppet-foreman: an authentication bypass vulnerability exists in foreman
- Red Hat Satellite 6.13 for RHEL 8
- Red Hat Satellite 6.14 for RHEL 8
- Authentication bypass
- CVSS 6.8 Medium
Foreman: host ssh key not being checked in remote execution
- Red Hat Satellite 6.15 for RHEL 8
- CWE-322
- CVSS 7.6 High
Satellite: arithmetic overflow in satellite
- Red Hat Satellite 6.15 for RHEL 8
- Authentication bypass