Red Hat Security AdvisoryRHSA-2022:1708
Satellite 6.10.5 Async Bug Fix Update
Released 2022-05-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.10 puppet-agent-6.26.0-1.el7sat, puppetserver-6.18.0-1.el7sat
- Red Hat Satellite Capsule 6.10 puppet-agent-6.26.0-1.el7sat, puppetserver-6.18.0-1.el7sat
Fixes 2 records
Priority MEDIUM 45
A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01372 · Published 2021-11-18 · Fixed in 7.12.1, 6.25.1
Priority LOW 31
A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01109 · Published 2021-11-18 · Partial fix · 7.12.1, 6.25.1
