satellite-common vulnerabilities (Red Hat)
202 vulnerabilities.
satellite-commonRed HatLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Mediumsatellite-commonRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Mediumsatellite-commonRed HatXSS in Action View5.4 Mediumsatellite-commonRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 Highsatellite-commonRed HatUntrusted users can run pending migrations in production in Rails6.5 Mediumsatellite-commonRed HatCSRF Vulnerability in rails-ujs6.5 Mediumsatellite-commonRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 Highsatellite-commonRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-commonRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-commonRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-commonRed HatDeserialization of untrusted data in Jackson Databind8.1 Highsatellite-commonRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 Highsatellite-commonRed HatAbility to forge per-form CSRF tokens in Rails4.3 Mediumsatellite-commonRed HatCircumvention of file size limits in ActiveStorage7.5 Highsatellite-commonRed HatPossible Strong Parameters Bypass in ActionPack7.5 Highsatellite-commonRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 Criticalsatellite-commonRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 Highsatellite-commonRed HatImproper Input Validation in Hibernate Validator5.3 Mediumsatellite-commonRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 Highsatellite-commonRed HatDenial of Service in Netty7.5 Highsatellite-commonRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highsatellite-commonRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Highsatellite-commonRed HatPossible XSS vulnerability in ActionView4.0 Mediumsatellite-commonRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 Highsatellite-commonRed HatSQL injection in Django8.8 Highsatellite-commonRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalsatellite-commonRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalsatellite-commonRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticalsatellite-commonRed HatImproper Certificate Validation in Puppet6.5 Mediumsatellite-commonRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalsatellite-commonRed HatHTTP Request Smuggling in Netty7.5 Highsatellite-commonRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumsatellite-commonRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Mediumsatellite-commonRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticalsatellite-commonRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 Mediumsatellite-commonRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Mediumsatellite-commonRed HatKatello cleartext password storage issue4.1 Mediumsatellite-commonRed HatDouble Free in psutil7.5 Highsatellite-commonRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumsatellite-commonRed HatApache MINA SSLFilter security Issue7.5 Highsatellite-commonRed HatInsecure Deserialization in Apache Commons Beanutils7.3 Highsatellite-commonRed HatIt was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce...7.4 Highsatellite-commonRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 Mediumsatellite-commonRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 Mediumsatellite-commonRed HatTwisted CRLF Injection6.1 Mediumsatellite-commonRed HatInformation exposure in FasterXML jackson-databind7.5 Highsatellite-commonRed HatIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...5.5 Mediumsatellite-commonRed HatA lack of access control was found in the message queues maintained by Satellite's QPID broker...8.0 Highsatellite-commonRed HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 Mediumsatellite-commonRed HatJinja2 sandbox escape vulnerability8.6 High- Show moreLoading…