Red Hat Security AdvisoryRHSA-2025:21893
Satellite 6.17.6.1 Async Update
Released 2025-11-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 6.17 for RHEL 9 foreman-3.14.0.11-1.el9sat, foreman-cli-3.14.0.11-1.el9sat, foreman-debug-3.14.0.11-1.el9sat +12
Fixes 1 record
Priority LOW 29
n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00384 · Published 2026-02-27 · Fixed in 3.16.2, 3.9.1.14-1.el8sat +9 CWE-863