Katello vulnerabilities

Products

• Katello 9

Newest

• katello, redhat subscription asset manager +1 more Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a... CVE-2014-0183 6.1 MediumJanuary 2, 2020
• katello Katello has a Denial of Service vulnerability in API OAuth authentication CVE-2013-4120 7.5 HighDecember 10, 2019
• katello Katello: Username in Notification page has cross site scripting CVE-2013-0283 5.4 MediumDecember 5, 2019
• katello, redhat satellite +1 more Katello has multiple XSS issues in various entities CVE-2013-2101 5.4 MediumDecember 3, 2019
• katello Katello allows remote authenticated users to call the "system remove_deletion" CLI command via... CVE-2013-4201 4.3 MediumMay 1, 2018
• katello, redhat satellite +1 more Katello SQL Injection vulnerabilities CVE-2016-3072 Fix available 8.8 HighJune 7, 2016
• katello Katello allows remote attackers to cause a denial of service (memory consumption) via the (1)... CVE-2014-3712 5.0 MediumNovember 3, 2014
• katello installer Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello... CVE-2013-4455 2.1 LowMay 14, 2014
• katello, katello katello-configure +1 more modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak... CVE-2012-6116 2.1 LowMarch 1, 2013
• katello script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc... CVE-2012-5561 2.1 LowMarch 1, 2013