The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-oauth-ttyUpgrade rubygem-apipie-bindingsUpgrade rubygem-snaky_hashUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-rest-clientUpgrade rubygem-little-pluggerUpgrade rubygem-unicodeUpgrade rubygem-netrcUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-brandingUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unfUpgrade rubygem-mime-types-dataUpgrade satellite-maintainUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-oauthUpgrade rubygem-gssapiUpgrade rubygem-mime-typesUpgrade rubygem-ffi-debugsourceUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffiUpgrade rubygem-domain_nameUpgrade rubygem-loggingUpgrade rubygem-amazing_printUpgrade rubygem-powerbarUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cliUpgrade rubygem-clampUpgrade satelliteUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-version_gemUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-http-cookieUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-ffi-debuginfoUpgrade rubygem-fast_gettextUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hashieUpgrade satellite-cli | Nov 13, 2023 | Dec 16, 2022 |
| Redhat_linux | — | Upgrade rubygem-unicodeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-foreman_maintainUpgrade rubygem-localeUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cliUpgrade rubygem-amazing_printUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-powerbarUpgrade rubygem-highlineUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-snaky_hashUpgrade rubygem-http-cookieUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unfUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-oauth-ttyUpgrade rubygem-apipie-bindingsUpgrade rubygem-rest-clientUpgrade rubygem-unf_extUpgrade rubygem-gssapiUpgrade foreman-cliUpgrade rubygem-little-pluggerUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_googleUpgrade python39-pulp_manifestUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-netrcUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-display_widthUpgrade satellite-brandingUpgrade rubygem-version_gemUpgrade rubygem-loggingUpgrade rubygem-clampUpgrade rubygem-ffiUpgrade satelliteUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debuginfoUpgrade rubygem-http-acceptUpgrade satellite-cliUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman | Nov 13, 2023 | Dec 16, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-utils-debuginfo | Mar 5, 2024 | Dec 16, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub