agentprime: red-hat-satellite-6

agentprime: red-hat-satellite-6Every new CVE for red-hat-satellite-6.https://agentprime.io/CVE-2026-96453: Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificateshttps://agentprime.io/advisories/CVE-2026-96453/https://agentprime.io/advisories/CVE-2026-96453/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:15:42 GMTCVECVE-2026-93998: Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuerhttps://agentprime.io/advisories/CVE-2026-93998/https://agentprime.io/advisories/CVE-2026-93998/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:15:33 GMTCVECVE-2026-120971: Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responseshttps://agentprime.io/advisories/CVE-2026-120971/https://agentprime.io/advisories/CVE-2026-120971/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 04:16:03 GMTCVECVE-2026-107203: Foreman: domain and subnet interface api skips host search filtershttps://agentprime.io/advisories/CVE-2026-107203/https://agentprime.io/advisories/CVE-2026-107203/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 05:10:29 GMTCVECVE-2026-107193: Foreman: api filter lookup ignores a search-limited filter permissionhttps://agentprime.io/advisories/CVE-2026-107193/https://agentprime.io/advisories/CVE-2026-107193/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 05:10:27 GMTCVECVE-2026-89091: Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionhttps://agentprime.io/advisories/CVE-2026-89091/https://agentprime.io/advisories/CVE-2026-89091/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 21:49:30 GMTCVECVE-2026-107445: Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypasshttps://agentprime.io/advisories/CVE-2026-107445/https://agentprime.io/advisories/CVE-2026-107445/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 03:43:03 GMTCVECVE-2026-107444: Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypasshttps://agentprime.io/advisories/CVE-2026-107444/https://agentprime.io/advisories/CVE-2026-107444/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 03:41:31 GMTCVECVE-2026-107151: Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requestshttps://agentprime.io/advisories/CVE-2026-107151/https://agentprime.io/advisories/CVE-2026-107151/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 12:36:29 GMTCVECVE-2026-103870: Pulp-rpm: distribution tree publish creates directories from .treeinfo idshttps://agentprime.io/advisories/CVE-2026-103870/https://agentprime.io/advisories/CVE-2026-103870/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 05:46:18 GMTCVECVE-2026-103869: Pulp-ansible: bearer tokens are reused across remotes in a workerhttps://agentprime.io/advisories/CVE-2026-103869/https://agentprime.io/advisories/CVE-2026-103869/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 05:46:15 GMTCVECVE-2026-103868: Pulp-container: registry credentials are reused across remotes in a workerhttps://agentprime.io/advisories/CVE-2026-103868/https://agentprime.io/advisories/CVE-2026-103868/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 05:46:12 GMTCVECVE-2026-106471: Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latchinghttps://agentprime.io/advisories/CVE-2026-106471/https://agentprime.io/advisories/CVE-2026-106471/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 01:49:11 GMTCVECVE-2026-56098: Rubygem-katello: improper authorization logic allows resource enumerationhttps://agentprime.io/advisories/CVE-2026-56098/https://agentprime.io/advisories/CVE-2026-56098/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 17:14:56 GMTCVECVE-2026-56097: Rubygem-katello: sql injection in registry proxy via labelshttps://agentprime.io/advisories/CVE-2026-56097/https://agentprime.io/advisories/CVE-2026-56097/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 17:14:50 GMTCVECVE-2026-12542: Foreman: command injection in foreman-tailhttps://agentprime.io/advisories/CVE-2026-12542/https://agentprime.io/advisories/CVE-2026-12542/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 17:14:49 GMTCVECVE-2026-12545: Rubygem-hammer_cli: command injection via insecure editor invocationhttps://agentprime.io/advisories/CVE-2026-12545/https://agentprime.io/advisories/CVE-2026-12545/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 17:14:49 GMTCVECVE-2026-12544: Foreman: ssti and insecure deserialization in foreman-rake configurationhttps://agentprime.io/advisories/CVE-2026-12544/https://agentprime.io/advisories/CVE-2026-12544/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:22:15 GMTCVECVE-2026-12541: Foreman: command injection in foreman-rake database taskshttps://agentprime.io/advisories/CVE-2026-12541/https://agentprime.io/advisories/CVE-2026-12541/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:22:09 GMTCVECVE-2026-12540: Foreman: command injection in foreman-rake errors:fetch_log via request_id parameterhttps://agentprime.io/advisories/CVE-2026-12540/https://agentprime.io/advisories/CVE-2026-12540/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:22:02 GMTCVECVE-2026-12423: Foreman: unauthenticated information disclosure via provisioning token validation flawhttps://agentprime.io/advisories/CVE-2026-12423/https://agentprime.io/advisories/CVE-2026-12423/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:21:52 GMTCVECVE-2026-12405: Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameterhttps://agentprime.io/advisories/CVE-2026-12405/https://agentprime.io/advisories/CVE-2026-12405/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:21:44 GMTCVECVE-2026-90959: Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key thefthttps://agentprime.io/advisories/CVE-2026-90959/https://agentprime.io/advisories/CVE-2026-90959/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 14:49:10 GMTCVECVE-2026-92904: Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations checkhttps://agentprime.io/advisories/CVE-2026-92904/https://agentprime.io/advisories/CVE-2026-92904/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 12:42:57 GMTCVECVE-2026-92893: Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parametershttps://agentprime.io/advisories/CVE-2026-92893/https://agentprime.io/advisories/CVE-2026-92893/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 10:28:12 GMTCVECVE-2026-92894: Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destructionhttps://agentprime.io/advisories/CVE-2026-92894/https://agentprime.io/advisories/CVE-2026-92894/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 10:08:40 GMTCVECVE-2026-42784: Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusionhttps://agentprime.io/advisories/CVE-2026-42784/https://agentprime.io/advisories/CVE-2026-42784/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 16:56:11 GMTCVECVE-2026-84232: Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg contenthttps://agentprime.io/advisories/CVE-2026-84232/https://agentprime.io/advisories/CVE-2026-84232/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 15:18:59 GMTCVECVE-2026-17615: Resteasy-core: resteasy sourceprovider remote unauthenticated file readhttps://agentprime.io/advisories/CVE-2026-17615/https://agentprime.io/advisories/CVE-2026-17615/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 16:15:01 GMTCVECVE-2026-82327: Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist datahttps://agentprime.io/advisories/CVE-2026-82327/https://agentprime.io/advisories/CVE-2026-82327/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 14:21:04 GMTCVECVE-2026-81668: Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookuphttps://agentprime.io/advisories/CVE-2026-81668/https://agentprime.io/advisories/CVE-2026-81668/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 11:15:42 GMTCVECVE-2026-81658: Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookuphttps://agentprime.io/advisories/CVE-2026-81658/https://agentprime.io/advisories/CVE-2026-81658/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 10:22:08 GMTCVECVE-2026-79654: Ketello: katello content view history api cross-organization authorization bypasshttps://agentprime.io/advisories/CVE-2026-79654/https://agentprime.io/advisories/CVE-2026-79654/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 05:37:38 GMTCVECVE-2026-19391: Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archiveshttps://agentprime.io/advisories/CVE-2026-19391/https://agentprime.io/advisories/CVE-2026-19391/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 06:25:22 GMTCVECVE-2026-48863: Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of servicehttps://agentprime.io/advisories/CVE-2026-48863/https://agentprime.io/advisories/CVE-2026-48863/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 00:46:12 GMTCVECVE-2026-5138: Foreman: foreman: information disclosure via improper validation of nested request parametershttps://agentprime.io/advisories/CVE-2026-5138/https://agentprime.io/advisories/CVE-2026-5138/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 14:08:43 GMTCVECVE-2026-5135: Foreman: foreman: unauthorized modification of host configurations via broken access controlhttps://agentprime.io/advisories/CVE-2026-5135/https://agentprime.io/advisories/CVE-2026-5135/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 14:08:39 GMTCVECVE-2026-5142: Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypasshttps://agentprime.io/advisories/CVE-2026-5142/https://agentprime.io/advisories/CVE-2026-5142/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 14:07:55 GMTCVECVE-2026-5136: Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulationhttps://agentprime.io/advisories/CVE-2026-5136/https://agentprime.io/advisories/CVE-2026-5136/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 13:28:00 GMTCVECVE-2026-13316: Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman confighttps://agentprime.io/advisories/CVE-2026-13316/https://agentprime.io/advisories/CVE-2026-13316/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 09:53:03 GMTCVECVE-2026-9149: Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv filehttps://agentprime.io/advisories/CVE-2026-9149/https://agentprime.io/advisories/CVE-2026-9149/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 23:34:56 GMTCVECVE-2026-9150: Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksumshttps://agentprime.io/advisories/CVE-2026-9150/https://agentprime.io/advisories/CVE-2026-9150/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 23:07:18 GMTCVECVE-2026-1961: Forman: foreman: remote code execution via command injection in websocket proxyhttps://agentprime.io/advisories/CVE-2026-1961/https://agentprime.io/advisories/CVE-2026-1961/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 12:53:09 GMTCVECVE-2025-10622: Foreman: os command injection via ct_location and fcct_location parametershttps://agentprime.io/advisories/CVE-2025-10622/https://agentprime.io/advisories/CVE-2025-10622/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 07:32:14 GMTCVECVE-2025-2157: Foreman: disclosure of executed commands and outputs in foreman / red hat satellitehttps://agentprime.io/advisories/CVE-2025-2157/https://agentprime.io/advisories/CVE-2025-2157/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Mar 2025 06:35:52 GMTCVECVE-2024-6861: Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql apihttps://agentprime.io/advisories/CVE-2024-6861/https://agentprime.io/advisories/CVE-2024-6861/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 Nov 2024 14:54:51 GMTCVECVE-2024-7700: Foreman: command injection in "host init config" template via "install packages" field on foremanhttps://agentprime.io/advisories/CVE-2024-7700/https://agentprime.io/advisories/CVE-2024-7700/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Aug 2024 16:48:54 GMTCVECVE-2024-4812: Katello: potential cross-site scripting exploit in uihttps://agentprime.io/advisories/CVE-2024-4812/https://agentprime.io/advisories/CVE-2024-4812/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Jun 2024 15:06:13 GMTCVECVE-2024-3716: Foreman-installer: candlepin database password being leaked to local users via the process listhttps://agentprime.io/advisories/CVE-2024-3716/https://agentprime.io/advisories/CVE-2024-3716/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Jun 2024 15:05:37 GMTCVECVE-2023-1832: Improper authorization check in the server componenthttps://agentprime.io/advisories/CVE-2023-1832/https://agentprime.io/advisories/CVE-2023-1832/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Oct 2023 13:05:37 GMTCVE