CVE-2018-14666: High severity red hat satellite vulnerability
An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-14666?
CVE-2018-14666 has a high severity rating due to improper authorization that can lead to unauthorized configuration changes.
How do I fix CVE-2018-14666?
To fix CVE-2018-14666, apply the latest security patches provided by Red Hat for Satellite 6.
What versions of Red Hat Satellite are affected by CVE-2018-14666?
CVE-2018-14666 affects all Red Hat Satellite 6 versions from 6.0 to 6.4.
What impact can CVE-2018-14666 have on my system?
CVE-2018-14666 allows attackers to modify the configuration of any registered host, potentially leading to significant security breaches.
Is there a workaround for CVE-2018-14666?
Currently, there is no recommended workaround for CVE-2018-14666 besides upgrading to the patched version of Red Hat Satellite.