REDHAT-BUG-1858284: High severity red hat satellite with embedded oracle vulnerability
Red Hat Satellite 6 allows local user of instance to read cache files. These credentials give full access via the API and local user on the foreman server can gain complete access of the instance.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1858284?
The severity of REDHAT-BUG-1858284 is critical due to the potential for local users to gain full access to the API.
How do I fix REDHAT-BUG-1858284?
To fix REDHAT-BUG-1858284, update Red Hat Satellite to the latest version that contains the security patches.
Who is affected by REDHAT-BUG-1858284?
Any local user with access to an instance of Red Hat Satellite 6 may be affected by REDHAT-BUG-1858284.
What are the risks associated with REDHAT-BUG-1858284?
The risks associated with REDHAT-BUG-1858284 include unauthorized access to sensitive data and potential manipulation of instance settings.
Is there a workaround for REDHAT-BUG-1858284 before a fix is available?
A temporary workaround for REDHAT-BUG-1858284 is to restrict local user access until a patch is applied.