Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Satellite Capsule 6 satellite_capsule:6.13::el8 | foreman-installer | 1:3.5.2.8-1.el8sat |
| Red Hat · Satellite Capsule 6 satellite_capsule:6.13::el8 | foreman-installer-katello | 1:3.5.2.8-1.el8sat |
| Red Hat · Satellite 6 satellite:6.13::el8 | foreman-installer | 1:3.5.2.8-1.el8sat |
| Red Hat · Satellite 6 satellite:6.13::el8 | foreman-installer-katello | 1:3.5.2.8-1.el8sat |
Vulnerabilities 2
-
Critical 9.8
Puppet-foreman: an authentication bypass vulnerability exists in foreman
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on unde…
-
Critical 9.8
Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.0, due to the puppet-pulpcore configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictio…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://docs.redhat.com/en/documentation/red_hat_satellite/6.13/html/upgrading_and_updating_red_hat_satellite/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2299429
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2305718
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6337.json
-
report
https://access.redhat.com/security/cve/CVE-2024-7012
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-7012
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-7012
-
report
https://access.redhat.com/security/cve/CVE-2024-7923
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-7923
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-7923