The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-ffi-debuginfoUpgrade rubygem-http-cookieUpgrade rubygem-fast_gettextUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-mime-typesUpgrade rubygem-highlineUpgrade foreman-cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-gssapiUpgrade rubygem-unf_extUpgrade satellite-cliUpgrade rubygem-hammer_cliUpgrade python39-pulp_manifestUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-http-acceptUpgrade rubygem-hashieUpgrade rubygem-powerbarUpgrade rubygem-amazing_printUpgrade rubygem-domain_nameUpgrade rubygem-loggingUpgrade rubygem-unf_ext-debuginfoUpgrade satelliteUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicodeUpgrade rubygem-rest-clientUpgrade satellite-cloneUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicode-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foremanUpgrade satellite-brandingUpgrade rubygem-oauth-ttyUpgrade rubygem-multi_jsonUpgrade rubygem-unfUpgrade rubygem-mime-types-dataUpgrade rubygem-foreman_maintainUpgrade satellite-maintainUpgrade rubygem-netrcUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-jwtUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-oauth | Nov 13, 2023 | Dec 16, 2022 |
| Redhat_linux | — | Upgrade rubygem-hashieUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unfUpgrade rubygem-snaky_hashUpgrade rubygem-oauth-ttyUpgrade rubygem-fast_gettextUpgrade rubygem-amazing_printUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-highlineUpgrade rubygem-jwtUpgrade rubygem-oauthUpgrade rubygem-powerbarUpgrade rubygem-ffi-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-foreman_maintainUpgrade foreman-cliUpgrade rubygem-localeUpgrade rubygem-apipie-bindingsUpgrade python39-pulp_manifestUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade satellite-cloneUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cliUpgrade rubygem-unf_extUpgrade satelliteUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-loggingUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-clampUpgrade rubygem-multi_jsonUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-mime-typesUpgrade rubygem-ffi-debugsourceUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade satellite-brandingUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debuginfoUpgrade satellite-maintainUpgrade satellite-cliUpgrade rubygem-unicode-debugsource | Nov 13, 2023 | Dec 16, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfo | Mar 5, 2024 | Dec 16, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub