satellite-cli vulnerabilities (Red Hat)
212 vulnerabilities.
satellite-cliRed HatLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Mediumsatellite-cliRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumsatellite-cliRed HatXSS in Action View5.4 Mediumsatellite-cliRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 Highsatellite-cliRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumsatellite-cliRed HatCSRF Vulnerability in rails-ujs6.5 Mediumsatellite-cliRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highsatellite-cliRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-cliRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-cliRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-cliRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-cliRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 Highsatellite-cliRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumsatellite-cliRed HatCircumvention of file size limits in ActiveStorage7.5 Highsatellite-cliRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highsatellite-cliRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalsatellite-cliRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 Highsatellite-cliRed HatImproper Input Validation in Hibernate Validator5.3 Mediumsatellite-cliRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 Highsatellite-cliRed HatDenial of Service in Netty7.5 Highsatellite-cliRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highsatellite-cliRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highsatellite-cliRed HatPossible XSS vulnerability in ActionView4.0 Mediumsatellite-cliRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highsatellite-cliRed HatSQL injection in Django8.8 Highsatellite-cliRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalsatellite-cliRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalsatellite-cliRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalsatellite-cliRed HatImproper Certificate Validation in Puppet6.5 Mediumsatellite-cliRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalsatellite-cliRed HatHTTP Request Smuggling in Netty7.5 Highsatellite-cliRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumsatellite-cliRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumsatellite-cliRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalsatellite-cliRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumsatellite-cliRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Mediumsatellite-cliRed HatKatello cleartext password storage issue4.1 Mediumsatellite-cliRed HatDouble Free in psutil7.5 Highsatellite-cliRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumsatellite-cliRed HatApache MINA SSLFilter security Issue7.5 Highsatellite-cliRed HatInsecure Deserialization in Apache Commons Beanutils7.3 Highsatellite-cliRed HatIt was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce...7.4 Highsatellite-cliRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 Mediumsatellite-cliRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 Mediumsatellite-cliRed HatTwisted CRLF Injection6.1 Mediumsatellite-cliRed HatInformation exposure in FasterXML jackson-databind7.5 Highsatellite-cliRed HatIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...5.5 Mediumsatellite-cliRed HatA lack of access control was found in the message queues maintained by Satellite's QPID broker...8.0 Highsatellite-cliRed HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 Mediumsatellite-cliRed HatJinja2 sandbox escape vulnerability8.6 High- Show moreLoading…