Red Hat Security AdvisoryRHSA-2025:21894
Satellite 6.16.5.6 Async Update
Released 2025-11-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 6.16 for RHEL 8 foreman-3.12.0.12-1.el8sat, foreman-cli-3.12.0.12-1.el8sat, foreman-debug-3.12.0.12-1.el8sat +16
- Red Hat Satellite 6.16 for RHEL 9 foreman-3.12.0.12-1.el9sat, foreman-cli-3.12.0.12-1.el9sat, foreman-debug-3.12.0.12-1.el9sat +16
Fixes 1 record
Priority LOW 29
n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00384 · Published 2026-02-27 · Fixed in 3.16.2, 3.9.1.14-1.el8sat +9 CWE-863
