Red Hat Satellite 5.4
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*part: a version: 5.4 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Satellite (0887e319-aaeb-5982-9c2f-3d67b0c1b34e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7513 |
vulnerable | 2026-06-08 05:09:56.362846 |
Details available
MEDIUM (5.4)
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.
Published: 2018-08-22T15:00:00.000Z
Updated: 2024-08-05T16:04:11.809Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3595 |
vulnerable | 2026-06-08 05:05:33.647224 |
Details available
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.
Published: 2014-09-22T15:00:00.000Z
Updated: 2024-08-06T10:50:17.708Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2056 |
vulnerable | 2026-06-08 05:03:58.161344 |
Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
HIGH (7.5)
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
Published: 2013-07-31T10:00:00.000Z
Updated: 2026-11-02T00:59:12.284Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1145 |
vulnerable | 2026-06-08 05:00:47.784273 |
Details available
spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remote attackers to cause a denial of service (/var partition disk consumption and failed updates) via a large number of package uploads.
Published: 2012-06-16T00:00:00.000Z
Updated: 2024-08-06T18:45:27.495Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0059 |
vulnerable | 2026-06-08 04:59:35.938175 |
Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages
MEDIUM (4.9)
A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.
Published: 2014-02-05T18:00:00.000Z
Updated: 2026-11-05T02:56:27.842Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1171 |
vulnerable | 2026-06-08 04:54:05.925857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.