Description
A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker's ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | foreman | 3.9.1.8 | — |
| Red Hat | Red Hat Satellite 6.15 for RHEL 8 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Utils 6 | foreman +1 | 3.9.1.8-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite Utils 6 | satellite +1 | 6.15.2-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite Capsule 6 | foreman +1 | 3.9.1.8-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite Capsule 6 | foreman-installer +1 | 1:3.9.3.2-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite Capsule 6 | python-pulp-container +1 | 2.16.9-1.el8pc | RHBA-2024:4589 |
| Red Hat Satellite Capsule 6 | python-pulpcore +1 | 3.39.15-1.el8pc | RHBA-2024:4589 |
| Red Hat Satellite Capsule 6 | rubygem-dynflow | 1.8.3-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite Capsule 6 | rubygem-smart_proxy_container_gateway | 3.0.0-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite Capsule 6 | rubygem-smart_proxy_remote_execution_ssh | 0.10.6-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite Capsule 6 | satellite +2 | 6.15.2-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite 6 | candlepin +1 | 4.3.14-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite 6 | foreman +14 | 3.9.1.8-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite 6 | foreman-installer +1 | 1:3.9.3.2-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite 6 | python-pulp-container +1 | 2.16.9-1.el8pc | RHBA-2024:4589 |
| Red Hat Satellite 6 | python-pulpcore +1 | 3.39.15-1.el8pc | RHBA-2024:4589 |
| Red Hat Satellite 6 | rubygem-dynflow | 1.8.3-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite 6 | rubygem-foreman_ansible | 13.0.6-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite 6 | rubygem-foreman_remote_execution +1 | 12.0.7-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite 6 | rubygem-katello | 4.11.0.15-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite 6 | rubygem-smart_proxy_container_gateway | 3.0.0-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite 6 | rubygem-smart_proxy_remote_execution_ssh | 0.10.6-1.el8sat | RHBA-2024:4589 |
| Red Hat Satellite 6 | satellite +2 | 6.15.2-1.el8sat | RHBA-2024:4589 |
Advisories 1
- RHBA-2024:4589 Red Hat Bug Fix Advisory: Satellite 6.15.2 Async Update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHBA-2024:4589 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-4871 vdb-entry
- RHBZ#2278627 issue-tracking