CVE-2017-15136: Input Validation
Jan Hutař of Red Hat reports:
When registering and activating a new system with Satellite 6 if the new systems hostname is then reset to the hostname of a previously registered system the previously registered system will lose access to updates including security updates.
Other sources
When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the hostname of a previously registered system the previously registered system will lose access to updates including security updates.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15136?
CVE-2017-15136 is considered a moderate severity vulnerability.
How do I fix CVE-2017-15136?
To fix CVE-2017-15136, ensure that the hostnames of registered systems in Satellite 6 remain unique.
What are the consequences of CVE-2017-15136?
The exploitation of CVE-2017-15136 can lead to previously registered systems losing access to updates and security patches.
Which version of Red Hat Satellite is affected by CVE-2017-15136?
Red Hat Satellite version 6.0 is affected by CVE-2017-15136.
Who reported CVE-2017-15136?
CVE-2017-15136 was reported by Jan Hutař of Red Hat.