satellite utils Schwachstellen (CVE)

Für satellite utils veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

32 Ergebnisse

4.3Mittel

CVE-2026-56098 vor 1 Monat

Rubygem-katello: improper authorization logic allows resource enumeration

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerability due to an execution fall-through in the registry_authorize filter. While the application identifies unauthorized requests and triggers…

6.5Mittel

CVE-2026-56097 vor 1 Monat

Rubygem-katello: sql injection in registry proxy via labels

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to sanitize input parameters used in database queries within the RegistryProxiesController. The methods check_blo…

6.7Mittel

CVE-2026-12545 vor 1 Monat

Rubygem-hammer_cli: command injection via insecure editor invocation

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on Rails) component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system() m…

5.3Mittel

CVE-2026-12542 vor 1 Monat

Foreman: command injection in foreman-tail

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expan…

9.1Kritisch

CVE-2026-96659 vor 1 Monat

Foreman: excessive permissions for viewer role on preview

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sen…

8.8Hoch

CVE-2026-96658 vor 1 Monat

Foreman: foreman: arbitrary code execution via safemode sandbox bypass

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engi…

7.7Hoch

CVE-2026-12544 vor 1 Monat

Foreman: ssti and insecure deserialization in foreman-rake configuration

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution c…

8.2Hoch

CVE-2026-12541 vor 1 Monat

Foreman: command injection in foreman-rake database tasks

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (…

1.2%EPSS

8.2Hoch

CVE-2026-12540 vor 1 Monat

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an underlying system command (typically grep) without adequate shell neutralization. While the task is inten…

1.2%EPSS

7.5Hoch

CVE-2026-12423 vor 1 Monat

Foreman: unauthenticated information disclosure via provisioning token validation flaw

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in host_verifier.rb. The application verifies the database state of a provisioning token rather than i…

8.8Hoch

CVE-2026-12405 vor 1 Monat

Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite API (/api/v2/job_invocations). When a job template has the effective_user property marked as overridable: true, the application fails to pr…

1.6%EPSS

4.3Mittel

CVE-2026-79654 vor 2 Monaten

Ketello: katello content view history api cross-organization authorization bypass

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access t…

7.8Hoch

CVE-2026-16493 vor 3 Monaten

Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)

Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9; Red Hat Red Hat Satellite 6.19 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2

A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone commands without a '--' (end-of-options) separator before user-supplied URLs when installing collections from git…

9.0Kritisch

CVE-2026-12701 vor 3 Monaten

Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport

Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Red Hat Satellite 6.16 for RHEL 8

A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrat…

1.2%EPSS

4.3Mittel

CVE-2026-5138 vor 4 Monaten

Foreman: foreman: information disclosure via improper validation of nested request parameters

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller method does not properly validate organization and location…

6.5Mittel

CVE-2026-5135 vor 4 Monaten

Foreman: foreman: unauthorized modification of host configurations via broken access control

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nested host …

6.5Mittel

CVE-2026-5142 vor 4 Monaten

Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability leads to cro…

8.8Hoch

CVE-2026-5136 vor 4 Monaten

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including admini…

4.3Mittel

CVE-2026-12515 vor 4 Monaten

Katello: missing repository authorization in content_uploads exposes cross-product content existence

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where insufficient authorization checks in the ContentUploadsController allowed users with the edit_products permission to query content information for repositories outside th…

7.8Hoch

CVE-2026-11332 vor 5 Monaten

Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 10; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git con…

7.8Hoch

CVE-2026-48864 vor 5 Monaten

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when proc…

8.0Hoch

CVE-2026-1961 vor 7 Monaten

Forman: foreman: remote code execution via command injection in websocket proxy

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when con…

1.9%EPSS

5.4Mittel

CVE-2026-4324 vor 7 Monaten

Rubygem-katello: katello: denial of service and potential information disclosure via sql injection

Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9; Red Hat Red Hat Satellite 6.19 for RHEL 9; Red Hat Red Hat Satellite 6

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API e…

7.5Hoch

CVE-2025-10990 vor 8 Monaten

Rexml: rexml: denial of service via inefficient regex parsing

Red Hat Satellite; Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9

A flaw was found in REXML. A remote attacker could exploit inefficient regular expression (regex) parsing when processing hex numeric character references (&#x...;) in XML documents. This could lead to a Regular Expression Denial of Service (ReDoS), impacting…

8.3Hoch

CVE-2026-0980 vor 8 Monaten

Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username

Red Hat Red Hat Satellite 6.16 for RHEL 8; Red Hat Red Hat Satellite 6.16 for RHEL 9; Red Hat Red Hat Satellite 6.17 for RHEL 9; Red Hat Red Hat Satellite 6.18 for RHEL 9

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the …