CVE-2014-8168: Medium severity red hat satellite vulnerability
In Red Hat Satellite, the MongoDB database can be accessed by any malicious local user of the Satellite server and pulpdatabase content can be modified or deleted. Embedded MongoDB was introduced in Satellite 6.0 onward therefore, all the current Satellite active versions are affected by the flaw.
Other sources
Red Hat Satellite 6 allows local users to access mongod and delete pulpdatabase.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8168?
CVE-2014-8168 is considered a high severity vulnerability due to unauthorized access to the MongoDB database.
How do I fix CVE-2014-8168?
Fixing CVE-2014-8168 involves restricting access to the MongoDB database on the Red Hat Satellite server.
What versions of Red Hat Satellite are affected by CVE-2014-8168?
CVE-2014-8168 affects all active versions of Red Hat Satellite starting from 6.0 onward.
What are the potential impacts of CVE-2014-8168?
The potential impacts of CVE-2014-8168 include unauthorized modification or deletion of pulp_database content.
Who can exploit CVE-2014-8168?
Any malicious local user of the Satellite server can exploit CVE-2014-8168 to access the MongoDB database.