Every CVE Search/ Get API key

CVE-2025-9572

Foreman: satellite: graphql api permission bypass leads to information disclosure

5.0 MediumFix available

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

0.38%Up 0.4 points since Feb 27, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.0

Foreman: satellite: graphql api permission bypass leads to information disclosure

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

Record
CVE-2025-9572
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weakness
CWE-863
Updated
2026-11-02
EUVDEUVD-2025-208131 5.0

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

Record
EUVD-2025-208131
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-gvvp-xfg4-2fr6 5.0

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata...

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

Record
GHSA-gvvp-xfg4-2fr6
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weakness
CWE-200, CWE-863
Updated
2026-11-02
NVD 5.0

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

Record
CVE-2025-9572
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-863
Updated
2026-11-02
OSV 5.0

Foreman: satellite: graphql api permission bypass leads to information disclosure

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

Record
CVE-2025-9572
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weakness
CWE-863
Updated
2026-11-02
OSVRHSA-2025:21886 5.0

Red Hat Security Advisory: Satellite 6.18.1 Async Update

Record
RHSA-2025:21886
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Updated
2026-11-02
Show 4 moreShow less
OSVRHSA-2025:21893 5.0

Red Hat Security Advisory: Satellite 6.17.6.1 Async Update

Record
RHSA-2025:21893
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:21894 5.0

Red Hat Security Advisory: Satellite 6.16.5.6 Async Update

Record
RHSA-2025:21894
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:21897 5.0

Red Hat Security Advisory: Satellite 6.15.5.7 Async Update

Record
RHSA-2025:21897
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2025-9572 5.0

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

Record
UBUNTU-CVE-2025-9572
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
foreman
Red Hat:satellite_capsule:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-debug
Red Hat:satellite_capsule:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-pcp
Red Hat:satellite_capsule:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
satellite
Red Hat:satellite_capsule:6.18::el9
 before 0:6.18.1-1.el9sat
0:6.18.1-1.el9sat
satellite-capsule
Red Hat:satellite_capsule:6.18::el9
 before 0:6.18.1-1.el9sat
0:6.18.1-1.el9sat
satellite-common
Red Hat:satellite_capsule:6.18::el9
 before 0:6.18.1-1.el9sat
0:6.18.1-1.el9sat
satellite-obsolete-packages
Red Hat:satellite_capsule:6.18::el9
 before 0:6.18.1-1.el9sat
0:6.18.1-1.el9sat
foreman
Red Hat:satellite_utils:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-cli
Red Hat:satellite_utils:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
satellite
Red Hat:satellite_utils:6.18::el9
 before 0:6.18.1-1.el9sat
0:6.18.1-1.el9sat
Show 124 moreShow less
Affected packages
PackageAffectedFixed
satellite-cli
Red Hat:satellite_utils:6.18::el9
 before 0:6.18.1-1.el9sat
0:6.18.1-1.el9sat
foreman
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-cli
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-debug
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-ec2
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-journald
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-libvirt
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-openstack
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-pcp
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-postgresql
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-redis
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-service
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-telemetry
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
foreman-vmware
Red Hat:satellite:6.18::el9
 before 0:3.16.0.7-1.el9sat
0:3.16.0.7-1.el9sat
rubygem-katello
Red Hat:satellite:6.18::el9
 before 0:4.18.0.4-1.el9sat
0:4.18.0.4-1.el9sat
satellite
Red Hat:satellite:6.18::el9
 before 0:6.18.1-1.el9sat
0:6.18.1-1.el9sat
satellite-cli
Red Hat:satellite:6.18::el9
 before 0:6.18.1-1.el9sat
0:6.18.1-1.el9sat
satellite-common
Red Hat:satellite:6.18::el9
 before 0:6.18.1-1.el9sat
0:6.18.1-1.el9sat
satellite-obsolete-packages
Red Hat:satellite:6.18::el9
 before 0:6.18.1-1.el9sat
0:6.18.1-1.el9sat
foreman
Red Hat:satellite_capsule:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-debug
Red Hat:satellite_capsule:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-pcp
Red Hat:satellite_capsule:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman
Red Hat:satellite_utils:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-cli
Red Hat:satellite_utils:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-cli
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-debug
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-ec2
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-journald
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-libvirt
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-openstack
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-ovirt
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-pcp
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-postgresql
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-redis
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-service
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-telemetry
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman-vmware
Red Hat:satellite:6.17::el9
 before 0:3.14.0.11-1.el9sat
0:3.14.0.11-1.el9sat
foreman
Red Hat:satellite_capsule:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-pcp
Red Hat:satellite_capsule:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
satellite
Red Hat:satellite_capsule:6.16::el8
 before 0:6.16.5.6-1.el8sat
0:6.16.5.6-1.el8sat
satellite-capsule
Red Hat:satellite_capsule:6.16::el8
 before 0:6.16.5.6-1.el8sat
0:6.16.5.6-1.el8sat
satellite-common
Red Hat:satellite_capsule:6.16::el8
 before 0:6.16.5.6-1.el8sat
0:6.16.5.6-1.el8sat
foreman
Red Hat:satellite_utils:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
satellite
Red Hat:satellite_utils:6.16::el8
 before 0:6.16.5.6-1.el8sat
0:6.16.5.6-1.el8sat
satellite-cli
Red Hat:satellite_utils:6.16::el8
 before 0:6.16.5.6-1.el8sat
0:6.16.5.6-1.el8sat
foreman
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-cli
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-debug
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-ec2
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-journald
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-libvirt
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-openstack
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-ovirt
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-pcp
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-postgresql
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-redis
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-service
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-telemetry
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
foreman-vmware
Red Hat:satellite:6.16::el8
 before 0:3.12.0.12-1.el8sat
0:3.12.0.12-1.el8sat
satellite
Red Hat:satellite:6.16::el8
 before 0:6.16.5.6-1.el8sat
0:6.16.5.6-1.el8sat
satellite-cli
Red Hat:satellite:6.16::el8
 before 0:6.16.5.6-1.el8sat
0:6.16.5.6-1.el8sat
satellite-common
Red Hat:satellite:6.16::el8
 before 0:6.16.5.6-1.el8sat
0:6.16.5.6-1.el8sat
foreman
Red Hat:satellite_capsule:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-debug
Red Hat:satellite_capsule:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-pcp
Red Hat:satellite_capsule:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
satellite
Red Hat:satellite_capsule:6.16::el9
 before 0:6.16.5.6-1.el9sat
0:6.16.5.6-1.el9sat
satellite-capsule
Red Hat:satellite_capsule:6.16::el9
 before 0:6.16.5.6-1.el9sat
0:6.16.5.6-1.el9sat
satellite-common
Red Hat:satellite_capsule:6.16::el9
 before 0:6.16.5.6-1.el9sat
0:6.16.5.6-1.el9sat
foreman
Red Hat:satellite_utils:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-cli
Red Hat:satellite_utils:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
satellite
Red Hat:satellite_utils:6.16::el9
 before 0:6.16.5.6-1.el9sat
0:6.16.5.6-1.el9sat
satellite-cli
Red Hat:satellite_utils:6.16::el9
 before 0:6.16.5.6-1.el9sat
0:6.16.5.6-1.el9sat
foreman
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-cli
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-debug
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-ec2
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-journald
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-libvirt
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-openstack
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-ovirt
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-pcp
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-postgresql
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-redis
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-service
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-telemetry
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
foreman-vmware
Red Hat:satellite:6.16::el9
 before 0:3.12.0.12-1.el9sat
0:3.12.0.12-1.el9sat
satellite
Red Hat:satellite:6.16::el9
 before 0:6.16.5.6-1.el9sat
0:6.16.5.6-1.el9sat
satellite-cli
Red Hat:satellite:6.16::el9
 before 0:6.16.5.6-1.el9sat
0:6.16.5.6-1.el9sat
satellite-common
Red Hat:satellite:6.16::el9
 before 0:6.16.5.6-1.el9sat
0:6.16.5.6-1.el9sat
foreman
Red Hat:satellite_capsule:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-pcp
Red Hat:satellite_capsule:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
satellite
Red Hat:satellite_capsule:6.15::el8
 before 0:6.15.5.7-1.el8sat
0:6.15.5.7-1.el8sat
satellite-capsule
Red Hat:satellite_capsule:6.15::el8
 before 0:6.15.5.7-1.el8sat
0:6.15.5.7-1.el8sat
satellite-common
Red Hat:satellite_capsule:6.15::el8
 before 0:6.15.5.7-1.el8sat
0:6.15.5.7-1.el8sat
foreman
Red Hat:satellite_utils:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
satellite
Red Hat:satellite_utils:6.15::el8
 before 0:6.15.5.7-1.el8sat
0:6.15.5.7-1.el8sat
satellite-cli
Red Hat:satellite_utils:6.15::el8
 before 0:6.15.5.7-1.el8sat
0:6.15.5.7-1.el8sat
foreman
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-cli
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-debug
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-ec2
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-journald
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-libvirt
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-openstack
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-ovirt
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-pcp
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-postgresql
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-redis
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-service
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-telemetry
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
foreman-vmware
Red Hat:satellite:6.15::el8
 before 0:3.9.1.14-1.el8sat
0:3.9.1.14-1.el8sat
satellite
Red Hat:satellite:6.15::el8
 before 0:6.15.5.7-1.el8sat
0:6.15.5.7-1.el8sat
satellite-cli
Red Hat:satellite:6.15::el8
 before 0:6.15.5.7-1.el8sat
0:6.15.5.7-1.el8sat
satellite-common
Red Hat:satellite:6.15::el8
 before 0:6.15.5.7-1.el8sat
0:6.15.5.7-1.el8sat

History

History
RecordedChangedSources
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-9572 is a medium vulnerability (CVSS 5.0) in Redhat Satellite, published November 21, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in foreman 0:3.16.0.7-1.el9sat.

References

Show 19 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open