Description
A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where insufficient authorization checks in the ContentUploadsController allowed users with the edit_products permission to query content information for repositories outside the products they were authorized to manage. An authenticated attacker could exploit this issue to determine whether specific content exists within repositories that should otherwise be inaccessible. This issue does not allow unauthorized modification, import, or publication of content.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 | — | — |
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 | — | — |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | — | — |
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | — | — |
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 | — | — |
| Red Hat | Red Hat Hardened Images | — | — |
| Red Hat | Red Hat Satellite 6 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Capsule 6 | libsolv +1 | 1:0.7.20-7.el8sat | RHSA-2026:50223 |
| Red Hat Satellite Capsule 6 | openvox-agent | 8.24.1-3.el8sat | RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite Capsule 6 | openvox-server | 8.14.1-1.el8sat | RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite Capsule 6 | python-pillow +1 | 12.3.0-1.el8pc | RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite Capsule 6 | python-pyjwt +2 | 2.13.0-1.el8pc | RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite Capsule 6 | python3.12-pillow | 12.3.0-1.el9pc | RHSA-2026:50263, RHSA-2026:50221 |
| Red Hat Satellite Capsule 6 | python3.12-pyjwt +1 | 2.13.0-1.el9pc | RHSA-2026:50263 |
| Red Hat Satellite Capsule 6 | rubygem-faraday | 1.10.6-1.el8sat | RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite Capsule 6 | rubygem-nokogiri | 1.15.7-3.el8sat | RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite 6 | libsolv +1 | 1:0.7.20-7.el8sat | RHSA-2026:50223 |
| Red Hat Satellite 6 | openvox-agent | 8.24.1-3.el8sat | RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite 6 | openvox-server | 8.14.1-1.el8sat | RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite 6 | python-pillow +1 | 12.3.0-1.el8pc | RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite 6 | python-pyjwt +2 | 2.13.0-1.el8pc | RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite 6 | python3.12-pillow | 12.3.0-1.el9pc | RHSA-2026:50263, RHSA-2026:50221 |
| Red Hat Satellite 6 | python3.12-pyjwt +1 | 2.13.0-1.el9pc | RHSA-2026:50263 |
| Red Hat Satellite 6 | rubygem-faraday | 1.10.6-1.el8sat | RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite 6 | rubygem-katello | 4.14.0.21-1.el8sat | RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222 |
| Red Hat Satellite 6 | rubygem-nokogiri | 1.15.7-3.el8sat | RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | katello | < 4.21.0.rc1 | 4.21.0.rc1 | GHSA-c43c-rf7g-5xpg |
Advisories 4
- RHSA-2026:50223 Red Hat Security Advisory: Satellite 6.16.12 Async Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:50263 Red Hat Security Advisory: Satellite 6.18.8 Async Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:50222 Red Hat Security Advisory: Satellite 6.17.10 Async Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:50221 Red Hat Security Advisory: Satellite 6.19.3 Async Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
References
- RHSA-2026:50221 vendor-advisory
- RHSA-2026:50222 vendor-advisory
- RHSA-2026:50223 vendor-advisory
- RHSA-2026:50263 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-12515 vdb-entry
- RHBZ#2489812 issue-tracking
- https://github.com/Katello/katello/pull/11712