Red Hat Security Advisory

RHSA-2016:1083

ruby193-rubygem-katello security update

Released 2016-05-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.1 ruby193-rubygem-katello-2.2.0.86-1.el6_6sat, ruby193-rubygem-katello-2.2.0.86-1.el7sat

Fixes 1 record

TI-2016-02572 CVE-2016-3072 · GHSA-527r-mfmj-prqf

Multiple SQL injection vulnerabilities in the scoped_search function in…

MEDIUM 42

Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow remote authenticated users to execute arbitrary SQL commands via the (1) sort_by o…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01835 Published 2016-06-07 Fixed in 2.4.3 CWE-89