GCVE - cpe:2.3:a:redhat:satellite:5.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:satellite:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Satellite (`0887e319-aaeb-5982-9c2f-3d67b0c1b34e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-10137`	vulnerable	2026-06-08 05:12:22.318399	Details available HIGH (8.1) A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process. Published: 2019-07-02T19:28:32.000Z Updated: 2024-08-04T22:10:10.032Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10137	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1077`	vulnerable	2026-06-08 05:11:16.835876	Details available Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server. Published: 2018-03-14T18:00:00.000Z Updated: 2024-09-17T01:21:18.539Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1555429	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7513`	vulnerable	2026-06-08 05:09:56.360393	Details available MEDIUM (5.4) It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate. Published: 2018-08-22T15:00:00.000Z Updated: 2024-08-05T16:04:11.809Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7513	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8163`	vulnerable	2026-06-08 05:06:08.231181	Details available Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5. Published: 2017-08-28T19:00:00.000Z Updated: 2024-08-06T13:10:51.110Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1187340 https://access.redhat.com/security/cve/cve-2014-8163	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.