Red Hat Security AdvisoryRHSA-2020:2740
candlepin and satellite security update
Released 2020-06-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.5 candlepin-2.5.22-1.el7sat, candlepin-selinux-2.5.22-1.el7sat, satellite-6.5.3.2-1.el7sat +4
- Red Hat Satellite Capsule 6.5 satellite-6.5.3.2-1.el7sat, satellite-capsule-6.5.3.2-1.el7sat, satellite-common-6.5.3.2-1.el7sat +1
Fixes 1 record
Priority MEDIUM 61
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.29082 · Published 2019-08-20 · Partial fix · 1.9.4 CWE-502
