A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1. A malicious user authenticated to a host registered to Satellite (or Capsule) can use this flaw to access QMF methods to any host also registered to Satellite (or Capsule) and execute privileged commands.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade katello-agentUpgrade katello-host-tools-fact-pluginUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade python-qpid-protonUpgrade qpid-proton-debuginfoUpgrade tfm-rubygem-domain_nameUpgrade python2-futureUpgrade tfm-runtimeUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-powerbarUpgrade rubygem-foreman_scap_clientUpgrade tfm-rubygem-awesome_printUpgrade tfm-rubygem-unfUpgrade tfm-ror52-runtimeUpgrade qpid-proton-c-debuginfoUpgrade python-psutil-debuginfoUpgrade satellite-cliUpgrade katello-host-toolsUpgrade python-psutilUpgrade satelliteUpgrade tfm-rubygem-unf_extUpgrade python2-tracerUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-json-debuginfoUpgrade tfm-rubygem-hashieUpgrade python-isodateUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-unicode-display_widthUpgrade python3-qpid-protonUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade python-psutil-debugsourceUpgrade katello-host-tools-tracerUpgrade python-gofer-protonUpgrade qpid-proton-cpp-debuginfoUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-oauthUpgrade python3-psutil-debuginfoUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_csvUpgrade python2-beautifulsoup4Upgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_dockerUpgrade tfm-rubygem-http-cookieUpgrade python-pulp-commonUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade python-pulp-puppet-commonUpgrade python3-tracerUpgrade goferUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade python3-goferUpgrade python3-futureUpgrade python-pulp-agent-libUpgrade puppet-agentUpgrade pulp-rpm-handlersUpgrade python-hashlib-debuginfoUpgrade pulp-puppet-toolsUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade qpid-proton-cUpgrade qpid-proton-debugsourceUpgrade python3-qpid-proton-debuginfoUpgrade tfm-ror52-rubygem-multi_jsonUpgrade tfm-rubygem-fast_gettextUpgrade python3-psutilUpgrade python-pulp-manifestUpgrade python3-beautifulsoup4Upgrade tracer-commonUpgrade python-argcompleteUpgrade tfm-rubygem-unicodeUpgrade tfm-ror52-rubygem-mime-typesUpgrade python-goferUpgrade python-hashlibUpgrade python-pulp-rpm-commonUpgrade tfm-rubygem-rest-clientUpgrade rubygem-jsonUpgrade python-uuidUpgrade tfm-rubygem-localeUpgrade satellite-brandingUpgrade tfm-rubygem-highlineUpgrade tfm-ror52-rubygem-mime-types-dataUpgrade python3-gofer-protonUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli | Aug 28, 2019 | Apr 11, 2019 |
| Redhat_linux | — | Upgrade python-hashlib-debuginfoUpgrade python2-beautifulsoup4Upgrade python-qpid-protonUpgrade satellite-brandingUpgrade python-isodateUpgrade python3-qpid-protonUpgrade foreman-cliUpgrade tfm-rubygem-awesome_printUpgrade tfm-rubygem-domain_nameUpgrade python-pulp-puppet-commonUpgrade python-psutilUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-json-debuginfoUpgrade tfm-rubygem-clampUpgrade python-uuidUpgrade python-gofer-protonUpgrade tfm-rubygem-unicode-display_widthUpgrade python-pulp-agent-libUpgrade tfm-rubygem-hammer_cli_csvUpgrade tfm-rubygem-unfUpgrade python3-gofer-protonUpgrade tfm-rubygem-hammer_cli_foremanUpgrade python-pulp-commonUpgrade pulp-rpm-handlersUpgrade qpid-proton-debugsourceUpgrade python2-futureUpgrade tfm-rubygem-fast_gettextUpgrade katello-host-tools-fact-pluginUpgrade tfm-ror52-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-unicode-debuginfoUpgrade qpid-proton-debuginfoUpgrade tfm-rubygem-little-pluggerUpgrade python3-goferUpgrade tfm-rubygem-loggingUpgrade python-pulp-manifestUpgrade python-psutil-debugsourceUpgrade tfm-ror52-runtimeUpgrade python-hashlibUpgrade python-psutil-debuginfoUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-unicodeUpgrade satellite-cliUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade python-goferUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-runtimeUpgrade python3-futureUpgrade python-argcompleteUpgrade rubygem-foreman_scap_clientUpgrade tfm-rubygem-oauthUpgrade katello-host-tools-tracerUpgrade python3-psutilUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade python3-tracerUpgrade tfm-ror52-rubygem-multi_jsonUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade python3-qpid-proton-debuginfoUpgrade tfm-rubygem-hashieUpgrade satelliteUpgrade tracer-commonUpgrade katello-agentUpgrade pulp-puppet-toolsUpgrade tfm-rubygem-rest-clientUpgrade qpid-proton-c-debuginfoUpgrade python-pulp-rpm-commonUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade goferUpgrade tfm-ror52-rubygem-mime-types-dataUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade python3-psutil-debuginfoUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_dockerUpgrade tfm-rubygem-http-cookieUpgrade qpid-proton-cUpgrade puppet-agentUpgrade katello-host-toolsUpgrade python2-tracerUpgrade python3-beautifulsoup4Upgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-highlineUpgrade rubygem-jsonUpgrade qpid-proton-cpp-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_admin | May 15, 2019 | Apr 11, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub