CVE-2020-14335: Infoleak
First published: Fri Jul 17 2020(Updated: )
A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/foreman | <0:2.3.1.20-1.el7 | 0:2.3.1.20-1.el7 |
| Redhat Satellite | =6.0 |
Remedy
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-14335?
CVE-2020-14335 is a vulnerability found in Red Hat Satellite that allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy.
How does CVE-2020-14335 impact system availability?
CVE-2020-14335 can result in a loss of system availability.
What is the severity of CVE-2020-14335?
CVE-2020-14335 has a severity level of 5.8 (medium).
Which software is affected by CVE-2020-14335?
Red Hat Satellite 2.3.1.20-1.el7 is affected by CVE-2020-14335.
How can the CVE-2020-14335 vulnerability be fixed?
To fix CVE-2020-14335, it is recommended to apply the appropriate patches provided by Red Hat.
- collector/redhat-cve
- collector/nvd-index
- agent/first-publish-date
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-14335
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/remedy
- agent/tags
- agent/description
- agent/event
- agent/trending
- package-manager/redhat
- vendor/redhat
- canonical/redhat satellite
- version/redhat satellite/6.0