Red Hat Security Advisory

RHSA-2014:1186

katello-configure security update

Released 2014-09-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Subscription Asset Manager for RHEL 6 Server katello-configure-1.4.5.1-3.el6sam

Fixes 1 record

TI-2014-02491 CVE-2014-3120 · GHSA-mrfm-jxgf-2h6v

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which…

CRITICAL 92KEV

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.88559 Published 2014-07-28 Fixed in 1.4.0.Beta1 CWE-284