Red Hat Security Advisory

RHSA-2012:1186

katello security update

Released 2012-08-21 · Red Hat rating Important · View on Red Hat →

Fixed in

CloudForms System Engine for RHEL 6 Server katello-0.1.320-1.el6cf, katello-all-0.1.320-1.el6cf, katello-common-0.1.320-1.el6cf +3

Fixes 1 record

TI-2012-03031 CVE-2012-3503 · GHSA-5xv2-q475-rwrh

The installation script in Katello 1.0 and earlier does not properly generate the…

MEDIUM 48

The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03002 Published 2012-08-25 Fixed in 1.0.6, 1.1.7 CWE-798