katello-agent vulnerabilities (Red Hat)

20 vulnerabilities.

• katello-agent Red Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... CVE-2014-3590 6.5 MediumJanuary 2, 2020
• katello-agent Red Hat A lack of access control was found in the message queues maintained by Satellite's QPID broker... CVE-2019-3845 Fix available 8.0 HighApril 11, 2019
• katello-agent Red Hat Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after. CVE-2015-5282 6.1 MediumSeptember 25, 2017
• katello-agent Red Hat Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the... CVE-2015-5152 8.1 HighJuly 14, 2017
• katello-agent Red Hat client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer... CVE-2016-3112 7.5 HighJune 8, 2017
• katello-agent Red Hat pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate... CVE-2016-3111 5.5 MediumJune 8, 2017
• katello-agent Red Hat The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or... CVE-2016-3108 7.1 HighJune 8, 2017
• katello-agent Red Hat The Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world... CVE-2016-3107 5.5 MediumJune 8, 2017
• katello-agent Red Hat Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman... CVE-2016-3728 8.8 HighMay 20, 2016
• katello-agent Red Hat Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which... CVE-2015-5233 Fix available 4.2 MediumApril 11, 2016
• katello-agent Red Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... CVE-2015-3235 6.0 MediumAugust 14, 2015
• katello-agent Red Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... CVE-2015-3155 5.0 MediumAugust 14, 2015
• katello-agent Red Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... CVE-2015-1844 4.0 MediumAugust 14, 2015
• katello-agent Red Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... CVE-2015-1816 5.0 MediumAugust 14, 2015
• katello-agent Red Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... CVE-2014-3653 4.3 MediumJuly 6, 2015
• katello-agent Red Hat Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2... CVE-2014-3691 Fix available 7.5 HighMarch 9, 2015
• katello-agent Red Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks CVE-2013-4346 Fix available 4.3 MediumMay 20, 2014
• katello-agent Red Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces CVE-2013-4347 Fix available 5.8 MediumOctober 25, 2013
• katello-agent Red Hat The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic... CVE-2014-3566 Public exploitFix available EPSS 100.0% 3.4 LowAugust 30, 2012
• katello-agent Red Hat Apache Tomcat affected by vulnerability in TLS and SSL protocol CVE-2009-3555 Public exploitFix available EPSS 87.3% 5.8 MediumNovember 9, 2009