Skip to content
OpenAdvisories
High · 8.0 CVE-2019-3845 EUVD-2019-13465GHSA-rcf7-8mg9-v2ww

A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before…

Published Apr 11, 2019 · Updated Aug 4, 2024 · Assigned by redhat

Vendor: Red Hat Product: qpid-dispatch-router

Description

A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1. A malicious user authenticated to a host registered to Satellite (or Capsule) can use this flaw to access QMF methods to any host also registered to Satellite (or Capsule) and execute privileged commands.

Affected products

VendorProductAffectedFixed
Red Hat qpid-dispatch-router fixed in Satellite >= 6.2, fixed in Satellite 6.1 - Optional, fixed in Satellite Capsule 6.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 gofer +2 2.12.5-3.el7sat RHSA-2019:1223
RHEL 7 katello-agent +2 3.5.0-2.el7sat RHSA-2019:1223
RHEL 7 pulp +1 2.18.1.1-1.el7sat RHSA-2019:1223
RHEL 7 pulp-rpm 2.18.1.5-1.el7sat RHSA-2019:1223
RHEL 7 python-isodate 0.5.0-5.pulp.el7sat RHSA-2019:1223
RHEL 7 qpid-proton +2 0.26.0-3.el7 RHSA-2019:1223
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Satellite Capsule 6 katello-installer-base +1 3.0.0.105-1.el6sat RHSA-2019:0735, RHSA-2019:0734, RHSA-2019:0733
Red Hat Satellite Capsule 6 libwebsockets 2.1.0-3.el6 RHSA-2019:0734
Red Hat Satellite Capsule 6 python-qpid 1.35.0-5.el6 RHSA-2019:0734
Red Hat Satellite Capsule 6 qpid-cpp +6 1.36.0-19.el6 RHSA-2019:0734
Red Hat Satellite Capsule 6 qpid-dispatch +2 0.8.0-10.el6 RHSA-2019:0734
Red Hat Satellite Capsule 6 qpid-proton +2 0.16.0-12.el6sat RHSA-2019:0734
Red Hat Satellite Capsule 6 satellite +2 6.2.16.1-1.0.el6sat RHSA-2019:0734, RHSA-2019:0733
Red Hat Satellite Capsule 6 satellite-common 6.3.5.1-1.el7sat RHSA-2019:0733
Red Hat Satellite 6 katello-installer-base +1 3.0.0.105-1.el6sat RHSA-2019:0735, RHSA-2019:0734, RHSA-2019:0733
Red Hat Satellite 6 libwebsockets 2.1.0-3.el6 RHSA-2019:0734
Red Hat Satellite 6 python-qpid 1.35.0-5.el6 RHSA-2019:0734
Red Hat Satellite 6 qpid-cpp +7 1.36.0-19.el6 RHSA-2019:0734
Red Hat Satellite 6 qpid-dispatch +2 0.8.0-10.el6 RHSA-2019:0734
Red Hat Satellite 6 qpid-proton +2 0.16.0-12.el6sat RHSA-2019:0734
Red Hat Satellite 6 satellite +3 6.2.16.1-1.0.el6sat RHSA-2019:0734, RHSA-2019:0733
Red Hat Satellite 6 satellite-common 6.3.5.1-1.el7sat RHSA-2019:0733
Red Hat Satellite 6 tfm-rubygem-foreman_theme_satellite 0.1.47.5-1.el6sat RHSA-2019:0734
Red Hat Satellite 6 tfm-rubygem-katello 3.0.0.171-1.el6sat RHSA-2019:0734
Red Hat Satellite 6 tfm-rubygem-katello_ostree 3.0.0.171-1.el7sat RHSA-2019:0734
Red Hat Satellite 6 tfm-rubygem-qpid_messaging 1.36.0-6.el6sat RHSA-2019:0734
Red Hat Rhel Satellite Tools 6 foreman +1 1.20.1.34-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 future +1 0.16.0-11.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 gofer +2 2.11.9-1.el5 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 katello-agent +2 3.5.0-2.el5 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 katello-host-tools-tracer 3.5.0-2.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 openscap +1 1.2.4-2.el6 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 pulp +2 2.18.1.1-1.el5 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 pulp-puppet +2 2.18.1-2.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 pulp-rpm +2 2.18.1.5-1.el5 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 puppet-agent 5.5.12-1.el5 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python-argcomplete 1.7.0-2.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python-beautifulsoup4 +1 4.6.3-2.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python-hashlib 20081119-7.el5sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python-isodate 0.5.0-4.el6sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python-psutil 5.0.1-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python-pulp-manifest 2.18.1.5-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python-uuid 1.30-4.el5 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python3-beautifulsoup4 4.6.3-2.el8sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python3-future 0.16.0-11.el8sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python3-gofer +1 2.12.5-3.el8sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python3-psutil 5.0.1-3.el8sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python3-qpid-proton 0.26.0-3.el8 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 python3-tracer 0.7.1-2.el8sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 qpid-proton +2 0.9-16.el5 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 rubygem-foreman_scap_client 0.4.5-1.el6sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 rubygem-json 1.4.6-2.el6 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 rubygems 1.3.7-5.el6 RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 satellite +1 6.5.0-11.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm +1 5.0-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-ror52 +1 1.0-4.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-ror52-rubygem-mime-types 3.2.2-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-ror52-rubygem-mime-types-data 3.2018.0812-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-ror52-rubygem-multi_json 1.13.1-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-apipie-bindings 0.2.2-2.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-awesome_print 1.8.0-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-clamp 1.1.2-4.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-domain_name 0.5.20160310-4.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-fast_gettext 1.4.1-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli 0.15.1.2-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_csv 2.3.1-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman 0.15.1.1-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman_admin 0.0.8-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman_ansible 0.1.1-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman_bootdisk 0.1.3.3-5.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman_discovery 1.0.0-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman_docker 0.0.6.1-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman_openscap 0.1.6-2.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman_remote_execution 0.1.0-2.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman_tasks 0.0.13-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman_templates 0.1.2-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_foreman_virt_who_configure 0.0.3-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hammer_cli_katello 0.16.0.11-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-hashie 3.6.0-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-highline 1.7.8-4.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-http-cookie 1.0.2-5.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-little-plugger 1.1.3-23.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-locale 2.0.9-13.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-logging 2.2.2-5.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-netrc 0.11.0-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-oauth 0.5.4-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-powerbar 2.0.1-1.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-rest-client 2.0.1-3.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-unf 0.1.3-7.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-unf_ext 0.0.6-9.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-unicode 0.4.4.1-6.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tfm-rubygem-unicode-display_width 1.0.5-5.el7sat RHSA-2019:1223
Red Hat Rhel Satellite Tools 6 tracer +2 0.7.1-2.el7sat RHSA-2019:1223

Advisories 4

References