The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-multi_jsonUpgrade tfm-runtimeUpgrade tfm-rubygem-jwtUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-loggingUpgrade satellite-maintainUpgrade satellite-cliUpgrade tfm-rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-powerbarUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-loggingUpgrade rubygem-mime-typesUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-rest-clientUpgrade foreman-cliUpgrade tfm-rubygem-unfUpgrade satellite-cloneUpgrade rubygem-unicodeUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-fast_gettextUpgrade rubygem-unfUpgrade rubygem-unf_extUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-clampUpgrade tfm-rubygem-netrcUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-domain_nameUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-http-cookieUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-localeUpgrade rubygem-jwtUpgrade rubygem-highlineUpgrade rubygem-hashieUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-amazing_printUpgrade tfm-rubygem-unicode | Jul 14, 2022 | Jul 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-clampUpgrade rubygem-localeUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-clampUpgrade rubygem-unfUpgrade satellite-cloneUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-amazing_printUpgrade rubygem-http-cookieUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-fast_gettextUpgrade rubygem-amazing_printUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-mime-typesUpgrade rubygem-jwtUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-loggingUpgrade foreman-cliUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_extUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-rest-clientUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satellite-maintainUpgrade rubygem-powerbarUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hashieUpgrade rubygem-domain_nameUpgrade tfm-runtimeUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-display_widthUpgrade satellite-cliUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicodeUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-highlineUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-mime-typesUpgrade rubygem-multi_json | Jul 14, 2022 | Jul 5, 2022 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub