Red Hat Security Advisory

RHSA-2019:0733

katello-installer-base security and enhancement update

Released 2019-04-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.3 foreman-installer-katello-3.4.5.35-1.el7sat, katello-installer-base-3.4.5.35-1.el7sat, satellite-6.3.5.1-1.el7sat +4
Red Hat Satellite Capsule 6.3 foreman-installer-katello-3.4.5.35-1.el7sat, katello-installer-base-3.4.5.35-1.el7sat, satellite-6.3.5.1-1.el7sat +3

Fixes 1 record

TI-2019-02857 CVE-2019-3845 · GHSA-rcf7-8mg9-v2ww

Improper access control in Red Hat qpid-dispatch-router

LOW 36

A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00679 Published 2019-04-11 Fixed CWE-284