Red Hat Security AdvisoryRHSA-2019:0734
katello-installer-base security and enhancement update
Released 2019-04-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.2 foreman-installer-katello-3.0.0.105-1.el6sat, foreman-installer-katello-3.0.0.105-1.el7sat, katello-installer-base-3.0.0.105-1.el6sat +47
- Red Hat Satellite Capsule 6.2 foreman-installer-katello-3.0.0.105-1.el6sat, foreman-installer-katello-3.0.0.105-1.el7sat, katello-installer-base-3.0.0.105-1.el6sat +37
Fixes 1 record
Priority LOW 36
A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00679 · Published 2019-04-11 · Fixed CWE-284
