End of life: 5/31/2025, End of support: 5/31/2024, Latest version: 6.14.4.5
End of life: 5/31/2025, End of support: 5/31/2024, Latest version: 6.14.4.5
An authentication bypass vulnerability exists in Foreman due to Pulpcore when deployed with Gunicorn versions earlier than 22.0. The issue arises from how Apache’s modproxy handles header as it fails to unset it properly due to restrictions on underscores in HTTP headers. This allow authentication through malformed header instead. This flaw affects all Katello/Satellite 6.10+ deployments using Pulpcore from version 4.0+ and could potentially allow unauthorized users to gain admin access.
End of life: 11/30/2024, End of support: 11/30/2023, Latest version: 6.13.7.3
End of life: 11/30/2024, End of support: 11/30/2023, Latest version: 6.13.7.3
End of life: 5/31/2024, End of support: 5/31/2023, Latest version: 6.12.5.3
End of life: 5/31/2024, End of support: 5/31/2023, Latest version: 6.12.5.3
End of life: 1/31/2024, End of support: 11/30/2022, Latest version: 6.11.5.7
End of life: 1/31/2024, End of support: 11/30/2022, Latest version: 6.11.5.7
Red Hat Satellite was affected by an improper authentication in which few factors allow for someone to use the SCA (simple content access) certificate for authentication with Candlepin. The SCA certificates are purposed only for authorizing content access against the CDN (or Pulp in case of Satellite).
End of life: 5/31/2023, End of support: 6/30/2022, Latest version: 6.10.7.2
End of life: 5/31/2023, End of support: 6/30/2022, Latest version: 6.10.7.2
End of life: 11/30/2022, End of support: 11/30/2021, Latest version: 6.9.10
End of life: 11/30/2022, End of support: 11/30/2021, Latest version: 6.9.10
A password leak was identified on Red Hat Satellite which will expose BMC password in plaintext through the compute host API.
End of life: 7/31/2022, End of support: 4/30/2021, Latest version: 6.8.6
End of life: 7/31/2022, End of support: 4/30/2021, Latest version: 6.8.6
A account takeover flaw was found in Red Hat Satellite 6.7.2 onward, a potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite.
A credential leak vulnerability was identified on Red Hat Satellite which will expose compute resources credential through VMs that are running on these resources in Satellite.
Red Hat Satellite 6 allows local user of instance to read cache files. These credentials give full access via the API and local user on the foreman server can gain complete access of the instance.
End of life: 11/30/2021, End of support: 10/31/2020, Latest version: 6.7.5
End of life: 11/30/2021, End of support: 10/31/2020, Latest version: 6.7.5
End of life: 5/14/2021, End of support: 4/30/2020, Latest version: 6.6.3
End of life: 5/14/2021, End of support: 4/30/2020, Latest version: 6.6.3
End of life: 10/31/2020, End of support: 10/31/2019, Latest version: 6.5.3
End of life: 10/31/2020, End of support: 10/31/2019, Latest version: 6.5.3
End of life: 4/30/2020, End of support: 5/31/2019, Latest version: 6.4.4
End of life: 4/30/2020, End of support: 5/31/2019, Latest version: 6.4.4
A vulnerability was discovered in the Foreman Remote Execution feature, allowing an unauthorized remote attacker to perform arbitrary code execution on managed hosts. The issue affects the component smartproxydynflow 0.1.8 and later (Foreman >= 1.15, Satellite >= 6.3)
Introducing commit:
https://github.com/theforeman/smartproxydynflow/commit/cb7b0b5c9b602f737ab4c6e9fb47c158241cf49c#diff-6dee70f4339cfc3dd8cedfc2a34f14c2
References:
https://bugzilla.redhat.com/showbug.cgi?id=1629003
End of life: 5/31/2019, End of support: 10/30/2018, Latest version: 6.3.5