CVE-2017-7513: Medium severity redhat Satellite vulnerability
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7513?
CVE-2017-7513 has been rated as a high severity vulnerability due to the potential for man-in-the-middle attacks.
How do I fix CVE-2017-7513?
To fix CVE-2017-7513, ensure that your PostgreSQL backend is configured to correctly validate X.509 server certificate host name fields.
Which versions of Red Hat Satellite are affected by CVE-2017-7513?
CVE-2017-7513 affects Red Hat Satellite versions from 5.0 to 5.8.
What type of attack can CVE-2017-7513 enable?
CVE-2017-7513 can enable man-in-the-middle attacks by spoofing a PostgreSQL server with a crafted X.509 certificate.
Is this CVE specific to Red Hat Satellite products?
Yes, CVE-2017-7513 specifically impacts Red Hat Satellite products configured with SSL/TLS for PostgreSQL.