The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-highlineUpgrade rubygem-ffiUpgrade rubygem-mime-typesUpgrade rubygem-hashieUpgrade satellite-cliUpgrade rubygem-gssapiUpgrade rubygem-hammer_cliUpgrade rubygem-powerbarUpgrade rubygem-domain_nameUpgrade rubygem-amazing_printUpgrade foreman-cliUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-acceptUpgrade rubygem-clampUpgrade rubygem-unf_extUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade satelliteUpgrade rubygem-ffi-debuginfoUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-localeUpgrade rubygem-fast_gettextUpgrade rubygem-unf_ext-debuginfoUpgrade satellite-maintainUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-mime-types-dataUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-foreman_maintainUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-jwtUpgrade satellite-cloneUpgrade rubygem-unicodeUpgrade rubygem-oauthUpgrade rubygem-rest-clientUpgrade satellite-brandingUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-oauth-ttyUpgrade rubygem-multi_jsonUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicode-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-netrc | Nov 13, 2023 | Dec 16, 2022 |
| Redhat_linux | — | Upgrade foreman-cliUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade python39-pulp_manifestUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-gssapiUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cliUpgrade rubygem-snaky_hashUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-http-cookieUpgrade rubygem-oauthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-types-dataUpgrade rubygem-localeUpgrade rubygem-little-pluggerUpgrade rubygem-foreman_maintainUpgrade rubygem-oauth-ttyUpgrade rubygem-highlineUpgrade rubygem-amazing_printUpgrade rubygem-unicodeUpgrade rubygem-apipie-bindingsUpgrade rubygem-jwtUpgrade satellite-cloneUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debugsourceUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-display_widthUpgrade satellite-brandingUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-multi_jsonUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-maintainUpgrade satellite-cliUpgrade rubygem-version_gemUpgrade rubygem-loggingUpgrade satelliteUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-clamp | Nov 13, 2023 | Dec 16, 2022 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsource | Mar 5, 2024 | Dec 16, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub