Description
A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Satellite Server | Satellite Server 6.9,6.10,6.11 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Utils 6 | foreman +1 | 3.5.1.24-1.el8sat | RHSA-2024:1061, RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | foreman +1 | 3.5.1.24-1.el8sat | RHSA-2024:1061, RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | mosquitto | 2.0.17-1.el8sat | RHSA-2024:1061 |
| Red Hat Satellite Capsule 6 | puppet-agent | 7.26.0-3.el8sat | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | puppetserver | 7.11.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-django +1 | 3.2.21-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-future +1 | 0.18.3-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-gitpython +1 | 3.1.32-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-pulp-ansible +1 | 1:0.16.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-requests +1 | 2.31.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-sqlparse +1 | 0.4.4-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | rubygem-rack | 2.2.7-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | foreman +12 | 3.5.1.24-1.el8sat | RHSA-2024:1061, RHSA-2023:6818 |
| Red Hat Satellite 6 | foreman-redis | 3.7.0.9-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | mosquitto | 2.0.17-1.el8sat | RHSA-2024:1061 |
| Red Hat Satellite 6 | puppet-agent | 7.26.0-3.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | puppetserver | 7.11.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-django +1 | 3.2.21-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-future +1 | 0.18.3-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-gitpython +1 | 3.1.32-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-pulp-ansible +1 | 1:0.16.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-requests +1 | 2.31.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-sqlparse +1 | 0.4.4-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-actionpack +2 | 6.1.7.3-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-git | 1.18.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-globalid | 1.1.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-kubeclient | 4.10.1-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-rack | 2.2.7-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | yggdrasil-worker-forwarder | 0.0.3-1.el8sat | RHSA-2023:6818 |
Advisories 3
- RHSA-2023:6818 Red Hat Security Advisory: Satellite 6.14 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1061 Red Hat Security Advisory: Red Hat Satellite 6 security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- WID-SEC-2022-2390 Red Hat Satellite: Schwachstelle ermöglicht Manipulation BSI CERT-Bund (WID) · Feb 29, 2024