High WID-SEC-2024-2060 2 CVEs

Red Hat Satellite: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Sep 4, 2024 · Updated Sep 4, 2024 · de-DE

Vendor: Red Hat Product: Satellite

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Satellite ausnutzen, um seine Privilegien zu erhöhen.

Product

Red Hat Satellite dient als zentrale Stelle für das Management, die Verteilung von Updates in Netzwerken mit Red Hat Enterprise Linux Systemen.

Vulnerabilities 2

Critical 9.8

CVE-2024-7012

Puppet-foreman: an authentication bypass vulnerability exists in foreman

An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on unde…

Red Hat Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.16 for RHEL 9 Red Hat Satellite 6.15 for RHEL 8

Sep 4, 2024
Critical 9.8

CVE-2024-7923

Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore

An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.0, due to the puppet-pulpcore configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictio…

Red Hat Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.16 for RHEL 9 Red Hat Update Infrastructure 4 for Cloud Providers

Sep 4, 2024

Revision history

2024-09-04 #1
Initiale Fassung

References

RedHat Security Advisory vom 2024-09-04
https://access.redhat.com/errata/RHSA-2024:6335
RedHat Security Advisory vom 2024-09-04
https://access.redhat.com/errata/RHSA-2024:6336
RedHat Security Advisory vom 2024-09-04
https://access.redhat.com/errata/RHSA-2024:6337