Red Hat Security Advisory

RHSA-2024:6337

Satellite 6.13.7.2 Security Update

Released 2024-09-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.13 for RHEL 8 foreman-installer-1:3.5.2.8-1.el8sat, foreman-installer-katello-1:3.5.2.8-1.el8sat

Fixes 2 records

TI-2024-07345 CVE-2024-7923 · GHSA-pmjc-mxf4-8qwx

Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore

MEDIUM 50

An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.0, due to the puppet-pulpcore configuration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00814 Published 2024-09-04 Fixed in 22.0, 1:3.5.2.8-1.el8sat +4 CWE-287

TI-2024-06507 CVE-2024-7012 · GHSA-gp3v-m4q9-3v8h

Puppet-foreman: an authentication bypass vulnerability exists in foreman

MEDIUM 50

An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00769 Published 2024-09-04 Fixed in 22.0, 1:3.5.2.8-1.el8sat +4 CWE-287