Skip to content
OpenAdvisories
Unscored Scanner template CVE-2020-7943 EUVD-2020-28865GHSA-xv72-7w5r-cqjw

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may cont…

Published Mar 11, 2020 · Updated Aug 4, 2024 · Assigned by puppet

Package: puppet Package: puppetdb Package: puppetdb Ecosystem: Debian Ecosystem: Ubuntu

Description

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource names and titles for defined types (which may contain sensitive information) as well as function names and class names. Previously, these endpoints were open to the local network. PE 2018.1.13 & 2019.5.0, Puppet Server 6.9.2 & 5.3.12, and PuppetDB 6.9.1 & 5.2.13 disable trapperkeeper-metrics /v1 metrics API and only allows /v2 access on localhost by default. This affects software versions: Puppet Enterprise 2018.1.x stream prior to 2018.1.13 Puppet Enterprise prior to 2019.5.0 Puppet Server prior to 6.9.2 Puppet Server prior to 5.3.12 PuppetDB prior to 6.9.1 PuppetDB prior to 5.2.13 Resolved in: Puppet Enterprise 2018.1.13 Puppet Enterprise 2019.5.0 Puppet Server 6.9.2 Puppet Server 5.3.12 PuppetDB 6.9.1 PuppetDB 5.2.13

Affected products

VendorProductAffectedFixed
— Puppet Enterprise 2018.1.x stream prior to 2018.1.13 —
— Puppet Enterprise prior to 2019.5.0 —
— Puppet Server prior to 6.9.2, prior to 5.3.12 —
— PuppetDB prior to 6.9.1, prior to 5.2.13 —
— Resolved in Puppet Enterprise, Puppet Server, PuppetDB Puppet Enterprise 2018.1.13 and 2019.5.0, Puppet Server 6.9.2 and 5.3.12, PuppetDB 6.9.1 and 5.2.13 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 13 puppetdb 7.11.2-2 —
Debian 12 puppetdb 7.11.2-2 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 puppetdb No fix yet —
Ubuntu 26.04 LTS puppetdb No fix yet —
Ubuntu 25.10 puppetdb No fix yet —
Ubuntu 24.04 LTS puppetdb No fix yet —
Ubuntu 22.04 LTS puppet +1 No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS puppet No fix yet —
Ubuntu 18.04 LTS puppet No fix yet —
Ubuntu 14.04 LTS puppet No fix yet —
Ubuntu Pro 16.04 LTS puppet No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Satellite Capsule 6 ansible-collection-redhat-satellite +1 1.3.0-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 ansible-runner +1 1.4.6-1.el7ar RHSA-2020:4366
Red Hat Satellite Capsule 6 ansiblerole-foreman_scap_client 0.0.5-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 ansiblerole-insights-client 1.7.1-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 ansiblerole-satellite-receptor-installer 0.6.13-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 crane-selinux +1 3.4.0-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 createrepo_c +1 0.7.4-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 foreman +1 2.1.2.19-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 foreman-bootloaders-redhat +1 202005201200-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 foreman-discovery-image 1:3.6.7-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 foreman-discovery-image-service +1 1.0.0-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 foreman-installer +1 1:2.1.2.8-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 foreman-proxy +1 2.1.2-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 future +1 0.16.0-11.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 gofer +2 2.12.5-7.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 hfsplus-tools 332.14-12.el7 RHSA-2020:4366
Red Hat Satellite Capsule 6 katello +3 3.16.0-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 katello-certs-tools 2.7.1-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 katello-client-bootstrap 1.7.5-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 kobo 0.5.1-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 libmodulemd 1.7.0-1.pulp.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 libsolv +1 0.7.4-4.pulp.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 libwebsockets 2.4.2-2.el7 RHSA-2020:4366
Red Hat Satellite Capsule 6 livecd-tools +1 1:20.4-1.6.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 mod_xsendfile 0.12-11.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 ostree 2017.1-2.atomic.el7 RHSA-2020:4366
Red Hat Satellite Capsule 6 pulp +14 2.21.3-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 pulp-docker +3 3.2.7-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 pulp-katello 1.0.3-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 pulp-ostree +3 1.3.1-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 pulp-rpm +8 2.21.3-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 puppet-agent 6.14.0-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 puppet-agent-oauth 0.5.1-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 puppet-foreman_scap_client 0.4.0-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 puppetlabs-stdlib 4.25.1-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 puppetserver 6.13.0-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 pycairo 1.16.3-9.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 pygobject3 +2 3.28.3-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-amqp +1 2.2.2-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-anyjson +1 0.3.3-11.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-apypie +1 0.2.2-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-billiard +1 1:3.5.0.3-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-blinker 1.3-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-bson +2 3.2-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-celery +1 4.0.2-9.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-click +1 6.7-9.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-crane +1 3.3.1-9.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-daemon +1 2.1.2-7.el7at RHSA-2020:4366
Red Hat Satellite Capsule 6 python-django +1 1.11.29-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-flask +1 1:0.12.2-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-gnupg 0.3.7-1.el7ui RHSA-2020:4366
Red Hat Satellite Capsule 6 python-isodate +1 0.5.4-12.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-itsdangerous +1 0.24-15.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-jinja2 +1 2.10-10.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-jmespath +1 0.9.0-6.el7_7 RHSA-2020:4366
Red Hat Satellite Capsule 6 python-kid 0.9.6-11.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-kombu +1 10:4.0.2-13.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-lockfile +1 1:0.11.0-10.el7ar RHSA-2020:4366
Red Hat Satellite Capsule 6 python-markupsafe +1 0.23-21.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-mongoengine 0.10.5-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-nectar 1.6.2-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-oauth2 1.5.211-8.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-okaara +1 1.0.37-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-pexpect +1 4.6-1.el7at RHSA-2020:4366
Red Hat Satellite Capsule 6 python-psutil 5.0.1-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-ptyprocess +1 0.5.2-3.el7at RHSA-2020:4366
Red Hat Satellite Capsule 6 python-pycurl +1 7.43.0.2-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-qpid 1.35.0-5.el7 RHSA-2020:4366
Red Hat Satellite Capsule 6 python-semantic_version 2.2.0-6.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-simplejson 3.2.0-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-twisted +1 16.4.1-12.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-vine +1 10:1.1.3-6.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-werkzeug +1 0.12.2-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 python-zope-interface 4.0.5-4.el7 RHSA-2020:4366
Red Hat Satellite Capsule 6 qpid-cpp +6 1.36.0-28.el7amq RHSA-2020:4366
Red Hat Satellite Capsule 6 qpid-dispatch +2 1.5.0-4.el7 RHSA-2020:4366
Red Hat Satellite Capsule 6 qpid-proton +2 0.28.0-3.el7 RHSA-2020:4366
Red Hat Satellite Capsule 6 redhat-access-insights-puppet 1.0.1-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 repoview 0.6.6-11.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 rubygem-fast_gettext 1.1.0-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 rubygem-highline 1.7.8-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 rubygem-newt 0.9.6-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 rubygem-oauth 0.5.4-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 saslwrapper +1 0.22-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 satellite +3 6.8.0-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 satellite-installer 6.8.0.11-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm +1 6.1-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-algebrick 0.7.3-6.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-ansi 1.5.0-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-apipie-params 0.0.5-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-bundler_ext 0.4.1-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-clamp 1.1.2-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-concurrent-ruby 1:1.1.6-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-concurrent-ruby-edge 1:0.6.0-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-domain_name 0.5.20160310-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-dynflow 1.4.7-1.fm2_1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-faraday 0.15.4-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-faraday_middleware 0.13.1-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-ffi 1.12.2-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-foreman-tasks-core 0.3.4-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-foreman_ansible_core 3.0.4-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-gssapi 1.2.0-6.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-hashie 3.6.0-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-highline 1.7.8-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-http-cookie 1.0.2-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-infoblox 3.0.0-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-journald-logger 2.0.4-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-journald-native 1.0.11-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-jwt 2.2.1-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-kafo 4.1.0-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-kafo_parsers 1.1.0-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-kafo_wizards 0.0.1-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-little-plugger 1.1.4-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-logging 2.2.2-6.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-logging-journald 2.0.0-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-mime-types 3.2.2-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-mime-types-data 3.2018.0812-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-multi_json 1.14.1-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-multipart-post 2.0.0-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-mustermann 1.0.2-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-net-ssh 4.2.0-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-net-ssh-krb 0.4.0-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-netrc 0.11.0-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-openscap 0.4.9-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-powerbar 2.0.1-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-rack 2.2.3-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-rb-inotify 0.9.7-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-rest-client 2.0.2-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-rkerberos 0.1.5-18.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-rsec 0.4.3-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-ruby-libvirt 0.7.0-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-rubyipmi 0.10.0-6.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-sequel 5.7.1-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-sinatra +1 2.0.3-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_ansible 3.0.1-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_dhcp_infoblox 0.0.16-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_dhcp_remote_isc 0.0.5-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_discovery 1.0.5-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_discovery_image 1.2.1-1.fm2_1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_dns_infoblox 1.0.0-7.fm2_1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_dynflow 0.2.4-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_dynflow_core 0.2.6-1.fm2_1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_openscap 0.7.3-1.fm2_1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_pulp 2.1.0-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-smart_proxy_remote_execution_ssh 0.3.0-3.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-sqlite3 1.3.13-5.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-statsd-instrument 2.1.4-2.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-tilt 2.0.8-4.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-unf 0.1.3-7.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-unf_ext 0.0.7.2-1.el7sat RHSA-2020:4366
Red Hat Satellite Capsule 6 tfm-rubygem-xmlrpc 0.3.0-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 ansible-collection-redhat-satellite 1.3.0-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 ansible-runner 1.4.6-1.el7ar RHSA-2020:4366
Red Hat Satellite 6 ansiblerole-foreman_scap_client 0.0.5-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 ansiblerole-insights-client 1.7.1-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 ansiblerole-satellite-receptor-installer 0.6.13-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 candlepin +1 3.1.21-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 crane-selinux +1 3.4.0-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 createrepo_c +1 0.7.4-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 foreman +13 2.1.2.19-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 foreman-bootloaders-redhat +1 202005201200-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 foreman-discovery-image 1:3.6.7-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 foreman-discovery-image-service +1 1.0.0-3.el7sat RHSA-2020:4366
Red Hat Satellite 6 foreman-installer +1 1:2.1.2.8-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 foreman-proxy +1 2.1.2-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 foreman-selinux 2.1.2.3-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 future 0.16.0-11.el7sat RHSA-2020:4366
Red Hat Satellite 6 gofer +2 2.12.5-7.el7sat RHSA-2020:4366
Red Hat Satellite 6 hfsplus-tools 332.14-12.el7 RHSA-2020:4366
Red Hat Satellite 6 katello +3 3.16.0-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 katello-certs-tools 2.7.1-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 katello-client-bootstrap 1.7.5-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 keycloak-httpd-client-install 1.2.2-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 kobo 0.5.1-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 libmodulemd 1.7.0-1.pulp.el7sat RHSA-2020:4366
Red Hat Satellite 6 libsolv 0.7.4-4.pulp.el7sat RHSA-2020:4366
Red Hat Satellite 6 libwebsockets 2.4.2-2.el7 RHSA-2020:4366
Red Hat Satellite 6 livecd-tools +1 1:20.4-1.6.el7sat RHSA-2020:4366
Red Hat Satellite 6 mod_passenger 4.0.18-24.el7sat RHSA-2020:4366
Red Hat Satellite 6 mod_xsendfile 0.12-11.el7sat RHSA-2020:4366
Red Hat Satellite 6 ostree 2017.1-2.atomic.el7 RHSA-2020:4366
Red Hat Satellite 6 pcp-mmvstatsd 0.4-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 pulp +4 2.21.3-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 pulp-docker +2 3.2.7-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 pulp-katello 1.0.3-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 pulp-ostree +2 1.3.1-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 pulp-rpm +6 2.21.3-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 puppet-agent 6.14.0-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 puppet-agent-oauth 0.5.1-3.el7sat RHSA-2020:4366
Red Hat Satellite 6 puppet-foreman_scap_client 0.4.0-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 puppetlabs-stdlib 4.25.1-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 puppetserver 6.13.0-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 pycairo 1.16.3-9.el7sat RHSA-2020:4366
Red Hat Satellite 6 pygobject3 3.28.3-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-aiohttp 3.6.2-4.el7ar RHSA-2020:4366
Red Hat Satellite 6 python-amqp 2.2.2-5.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-anyjson 0.3.3-11.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-apypie 0.2.2-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-async-timeout 3.0.1-2.el7ar RHSA-2020:4366
Red Hat Satellite 6 python-attrs 19.3.0-3.el7ar RHSA-2020:4366
Red Hat Satellite 6 python-billiard 1:3.5.0.3-3.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-blinker 1.3-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-bson 3.2-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-celery 4.0.2-9.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-chardet 3.0.4-10.el7ar RHSA-2020:4366
Red Hat Satellite 6 python-click 6.7-9.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-crane 3.3.1-9.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-daemon 2.1.2-7.el7at RHSA-2020:4366
Red Hat Satellite 6 python-dateutil 2.8.1-2.el7ar RHSA-2020:4366
Red Hat Satellite 6 python-django 1.11.29-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-flask 1:0.12.2-4.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-gnupg 0.3.7-1.el7ui RHSA-2020:4366
Red Hat Satellite 6 python-idna 2.4-2.el7ar RHSA-2020:4366
Red Hat Satellite 6 python-idna-ssl 1.1.0-2.el7ar RHSA-2020:4366
Red Hat Satellite 6 python-isodate 0.5.4-12.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-itsdangerous 0.24-15.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-jinja2 2.10-10.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-jmespath 0.9.0-6.el7_7 RHSA-2020:4366
Red Hat Satellite 6 python-kid 0.9.6-11.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-kombu 10:4.0.2-13.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-lockfile 1:0.11.0-10.el7ar RHSA-2020:4366
Red Hat Satellite 6 python-markupsafe 0.23-21.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-mongoengine 0.10.5-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-multidict 4.7.4-2.el7ar RHSA-2020:4366
Red Hat Satellite 6 python-nectar 1.6.2-1.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-oauth2 1.5.211-8.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-okaara 1.0.37-2.el7sat RHSA-2020:4366
Red Hat Satellite 6 python-pexpect 4.6-1.el7at RHSA-2020:4366
Red Hat Satellite 6 python-prometheus-client 0.7.1-2.el7ar RHSA-2020:4366
Red Hat Satellite 6 python-psutil 5.0.1-3.el7sat RHSA-2020:4366

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Advisories 1

References