Red Hat Satellite 6.15
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:satellite:6.15:*:*:*:*:*:*:*
part: a version: 6.15 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Satellite (0887e319-aaeb-5982-9c2f-3d67b0c1b34e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9572 |
vulnerable | 2026-06-08 07:45:22.710769 |
Foreman: satellite: graphql api permission bypass leads to information disclosure
MEDIUM (5)
n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.
Published: 2026-02-27T07:28:44.391Z
Updated: 2026-03-24T11:28:32.518Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7923 |
vulnerable | 2026-06-08 06:58:23.963121 |
Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
CRITICAL (9.8)
An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.0, due to the puppet-pulpcore configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) which are using Pulpcore version 3.0+ and could potentially enable unauthorized users to gain administrative access.
Published: 2024-09-04T13:41:48.872Z
Updated: 2025-11-11T16:12:18.584Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7012 |
vulnerable | 2026-06-08 06:58:21.057104 |
Puppet-foreman: an authentication bypass vulnerability exists in foreman
CRITICAL (9.8)
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) and could potentially enable unauthorized users to gain administrative access.
Published: 2024-09-04T13:41:17.877Z
Updated: 2025-11-11T15:29:25.711Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.