Red Hat Security Advisory

RHSA-2012:1187

katello security update

Released 2012-08-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Subscription Asset Manager for RHEL 6 Server katello-0.3.4-1.el6_2, katello-common-0.3.4-1.el6_2, katello-glue-candlepin-0.3.4-1.el6_2

Fixes 1 record

TI-2012-03031 CVE-2012-3503 · GHSA-5xv2-q475-rwrh

The installation script in Katello 1.0 and earlier does not properly generate the…

MEDIUM 48

The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03002 Published 2012-08-25 Fixed in 1.0.6, 1.1.7 CWE-798