Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Red Hat Satellite 6.13 for RHEL 8, Red Hat Satellite 6.14 for RHEL 8 and 3 more products — RHSA-2024:6336 Clear all filters
TI-2024-07345 CVE-2024-7923 · GHSA-pmjc-mxf4-8qwx

Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore

Priority MEDIUM 50

An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.0, due to the puppet-pulpcore configuration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00814 Published 2024-09-04 Fixed in 22.0, 1:3.5.2.8-1.el8sat +4 CWE-287
TI-2024-06507 CVE-2024-7012 · GHSA-gp3v-m4q9-3v8h

Puppet-foreman: an authentication bypass vulnerability exists in foreman

Priority MEDIUM 50

An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00769 Published 2024-09-04 Fixed in 22.0, 1:3.5.2.8-1.el8sat +4 CWE-287