CVE-2020-14335: Infoleak
A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability.
Other sources
Red Hat Satellite 6 allows local user of Smart-Proxy system to read OMAPI interface secret. Local user using the ISC DHCP server can read object mapping API (OMAPI) secret, as by default it listens on all interfaces for OMAPI interfaction.
— Red Hat
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2020-14335?
CVE-2020-14335 is a vulnerability found in Red Hat Satellite that allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy.
How does CVE-2020-14335 impact system availability?
CVE-2020-14335 can result in a loss of system availability.
What is the severity of CVE-2020-14335?
CVE-2020-14335 has a severity level of 5.8 (medium).
Which software is affected by CVE-2020-14335?
Red Hat Satellite 2.3.1.20-1.el7 is affected by CVE-2020-14335.
How can the CVE-2020-14335 vulnerability be fixed?
To fix CVE-2020-14335, it is recommended to apply the appropriate patches provided by Red Hat.