CVE Daily – Red Hat Satellite https://cvedaily.com/pages/tags/redhat-satellite.html CVE Daily – Red Hat Satellite en Wed, 03 Jun 2026 21:26:58 +0000 [Medium] CVE-2026-4324 – A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability... https://nvd.nist.gov/vuln/detail/CVE-2026-4324 https://nvd.nist.gov/vuln/detail/CVE-2026-4324 Tue, 17 Mar 2026 14:16:19 +0000 Medium CVE-2026-4324

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection,…

CVSS: 5.4 · CWE: CWE-89

View on NVD

]]> [High] CVE-2026-0980 – A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller ... https://nvd.nist.gov/vuln/detail/CVE-2026-0980 https://nvd.nist.gov/vuln/detail/CVE-2026-0980 Fri, 27 Feb 2026 08:17:09 +0000 High CVE-2026-0980

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.

CVSS: 8.3 · CWE: CWE-78

View on NVD

]]> [High] CVE-2025-10622 – A flaw was found in Red Hat Satellite (Foreman component). This vulnerability al... https://nvd.nist.gov/vuln/detail/CVE-2025-10622 https://nvd.nist.gov/vuln/detail/CVE-2025-10622 Wed, 05 Nov 2025 08:15:32 +0000 High CVE-2025-10622

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

CVSS: 8.0 · CWE: CWE-78

View on NVD

]]> [Low] CVE-2025-2157 – A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow l... https://nvd.nist.gov/vuln/detail/CVE-2025-2157 https://nvd.nist.gov/vuln/detail/CVE-2025-2157 Sat, 15 Mar 2025 07:15:34 +0000 Low CVE-2025-2157

A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, exposing sensitive command outputs, such as /etc/shadow. This issue can lead to information disclosure and privilege escalation if exploited effectively.

CVSS: 3.3 · CWE: CWE-922

View on NVD

]]> [Medium] CVE-2021-4142 – The Candlepin component of Red Hat Satellite was affected by an improper authent... https://nvd.nist.gov/vuln/detail/CVE-2021-4142 https://nvd.nist.gov/vuln/detail/CVE-2021-4142 Wed, 24 Aug 2022 16:15:09 +0000 Medium CVE-2021-4142

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.

CVSS: 5.5 · CWE: CWE-639

View on NVD

]]> [Medium] CVE-2020-10710 – A flaw was found where the Plaintext Candlepin password is disclosed while updat... https://nvd.nist.gov/vuln/detail/CVE-2020-10710 https://nvd.nist.gov/vuln/detail/CVE-2020-10710 Tue, 16 Aug 2022 21:15:09 +0000 Medium CVE-2020-10710

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.

CVSS: 4.4 · CWE: CWE-522

View on NVD

]]> [High] CVE-2020-14380 – An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potentia... https://nvd.nist.gov/vuln/detail/CVE-2020-14380 https://nvd.nist.gov/vuln/detail/CVE-2020-14380 Wed, 02 Jun 2021 13:15:09 +0000 High CVE-2020-14380

An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite.

CVSS: 7.5 · CWE: CWE-287

View on NVD

]]> [Medium] CVE-2020-14371 – A credential leak vulnerability was found in Red Hat Satellite. This flaw expose... https://nvd.nist.gov/vuln/detail/CVE-2020-14371 https://nvd.nist.gov/vuln/detail/CVE-2020-14371 Wed, 02 Jun 2021 13:15:08 +0000 Medium CVE-2020-14371

A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are running on these resources in Satellite.

CVSS: 6.5 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2020-14335 – A flaw was found in Red Hat Satellite, which allows a privileged attacker to rea... https://nvd.nist.gov/vuln/detail/CVE-2020-14335 https://nvd.nist.gov/vuln/detail/CVE-2020-14335 Wed, 02 Jun 2021 12:15:08 +0000 Medium CVE-2020-14335

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability.

CVSS: 5.5 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2020-10716 – A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" e... https://nvd.nist.gov/vuln/detail/CVE-2020-10716 https://nvd.nist.gov/vuln/detail/CVE-2020-10716 Thu, 27 May 2021 19:15:07 +0000 Medium CVE-2020-10716

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.

CVSS: 6.5 · CWE: CWE-285

View on NVD

]]> [Medium] CVE-2021-3413 – A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in version... https://nvd.nist.gov/vuln/detail/CVE-2021-3413 https://nvd.nist.gov/vuln/detail/CVE-2021-3413 Thu, 08 Apr 2021 23:15:12 +0000 Medium CVE-2021-3413

A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS: 6.3 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2021-20256 – A flaw was found in Red Hat Satellite. The BMC interface exposes the password th... https://nvd.nist.gov/vuln/detail/CVE-2021-20256 https://nvd.nist.gov/vuln/detail/CVE-2021-20256 Tue, 23 Feb 2021 23:15:13 +0000 Medium CVE-2021-20256

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS: 5.3 · CWE: CWE-200

View on NVD

]]> [High] CVE-2020-14334 – A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read... https://nvd.nist.gov/vuln/detail/CVE-2020-14334 https://nvd.nist.gov/vuln/detail/CVE-2020-14334 Fri, 31 Jul 2020 13:15:12 +0000 High CVE-2020-14334

A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance.

CVSS: 8.8 · CWE: CWE-522

View on NVD

]]> [Medium] CVE-2014-3590 – Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a cor... https://nvd.nist.gov/vuln/detail/CVE-2014-3590 https://nvd.nist.gov/vuln/detail/CVE-2014-3590 Thu, 02 Jan 2020 20:15:19 +0000 Medium CVE-2014-3590

Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Therefore, an attacker can log out a user by having them view specially crafted content.

CVSS: 6.5 · CWE: CWE-352

View on NVD

]]> [High] CVE-2019-3891 – It was discovered that a world-readable log file belonging to Candlepin componen... https://nvd.nist.gov/vuln/detail/CVE-2019-3891 https://nvd.nist.gov/vuln/detail/CVE-2019-3891 Mon, 15 Apr 2019 12:31:42 +0000 High CVE-2019-3891

It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching package updates, thus preventing all Satellite hosts from accessing those updates.

CVSS: 7.8 · CWE: CWE-532

View on NVD

]]> [Medium] CVE-2018-14666 – An improper authorization flaw was found in the Smart Class feature of Foreman. ... https://nvd.nist.gov/vuln/detail/CVE-2018-14666 https://nvd.nist.gov/vuln/detail/CVE-2018-14666 Tue, 22 Jan 2019 15:29:00 +0000 Medium CVE-2018-14666

An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions.

CVSS: 6.8 · CWE: CWE-285

View on NVD

]]> [Medium] CVE-2017-7514 – A cross-site scripting (XSS) flaw was found in how the failed action entry is pr... https://nvd.nist.gov/vuln/detail/CVE-2017-7514 https://nvd.nist.gov/vuln/detail/CVE-2017-7514 Mon, 30 Jul 2018 15:29:00 +0000 Medium CVE-2017-7514

A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.

CVSS: 4.3 · CWE: CWE-79

View on NVD

]]> [Low] CVE-2017-12175 – Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you a... https://nvd.nist.gov/vuln/detail/CVE-2017-12175 https://nvd.nist.gov/vuln/detail/CVE-2017-12175 Thu, 26 Jul 2018 17:29:00 +0000 Low CVE-2017-12175

Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomplete functionality.

CVSS: 3.5 · CWE: CWE-79

View on NVD

]]> [Low] CVE-2017-15136 – When registering and activating a new system with Red Hat Satellite 6 if the new... https://nvd.nist.gov/vuln/detail/CVE-2017-15136 https://nvd.nist.gov/vuln/detail/CVE-2017-15136 Tue, 27 Feb 2018 21:29:00 +0000 Low CVE-2017-15136

When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the hostname of a previously registered system the previously registered system will lose access to updates including security updates.

CVSS: 2.7 · CWE: CWE-20

View on NVD

]]> [High] CVE-2015-5164 – The Qpid server on Red Hat Satellite 6 does not properly restrict message types,... https://nvd.nist.gov/vuln/detail/CVE-2015-5164 https://nvd.nist.gov/vuln/detail/CVE-2015-5164 Wed, 18 Oct 2017 16:29:00 +0000 High CVE-2015-5164

The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote authenticated users with administrative access on a managed content host to execute arbitrary code via a crafted message, related to a pickle processing problem in pulp.

CVSS: 7.2 · CWE: CWE-502

View on NVD

]]> [Medium] CVE-2014-8163 – Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5... https://nvd.nist.gov/vuln/detail/CVE-2014-8163 https://nvd.nist.gov/vuln/detail/CVE-2014-8163 Mon, 28 Aug 2017 19:29:00 +0000 Medium CVE-2014-8163

Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.

CVSS: 6.5 · CWE: CWE-22

View on NVD

]]> [Medium] CVE-2014-8168 – Red Hat Satellite 6 allows local users to access mongod and delete pulp_database... https://nvd.nist.gov/vuln/detail/CVE-2014-8168 https://nvd.nist.gov/vuln/detail/CVE-2014-8168 Mon, 28 Aug 2017 15:29:00 +0000 Medium CVE-2014-8168

Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.

CVSS: 6.1 · CWE: CWE-284

View on NVD

]]> [Medium] CVE-2014-0141 – Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3. https://nvd.nist.gov/vuln/detail/CVE-2014-0141 https://nvd.nist.gov/vuln/detail/CVE-2014-0141 Mon, 28 Aug 2017 15:29:00 +0000 Medium CVE-2014-0141

Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2014-8180 – MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by lo... https://nvd.nist.gov/vuln/detail/CVE-2014-8180 https://nvd.nist.gov/vuln/detail/CVE-2014-8180 Tue, 06 Jun 2017 18:29:00 +0000 Medium CVE-2014-8180

MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service.

CVSS: 5.5 · CWE: CWE-287

View on NVD

]]> [Medium] CVE-2016-2104 – Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow... https://nvd.nist.gov/vuln/detail/CVE-2016-2104 https://nvd.nist.gov/vuln/detail/CVE-2016-2104 Thu, 13 Apr 2017 14:59:01 +0000 Medium CVE-2016-2104

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the label parameter to admin/BunchDetail.do; (2) the package_name, (3) search_subscribed_channels, or (4) channel_filter parameter to software/packages/NameOverview.do; or unspecified vectors related to (5) or (6) tags.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2016-3097 – Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite ... https://nvd.nist.gov/vuln/detail/CVE-2016-3097 https://nvd.nist.gov/vuln/detail/CVE-2016-3097 Fri, 05 Aug 2016 14:59:05 +0000 Medium CVE-2016-3097

Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via a group name, related to viewing snapshot data.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2016-3080 – Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite ... https://nvd.nist.gov/vuln/detail/CVE-2016-3080 https://nvd.nist.gov/vuln/detail/CVE-2016-3080 Fri, 05 Aug 2016 14:59:02 +0000 Medium CVE-2016-3080

Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via the (1) RHNMD User or (2) Filesystem parameters, related to display of monitoring probes.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2016-3079 – Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk a... https://nvd.nist.gov/vuln/detail/CVE-2016-3079 https://nvd.nist.gov/vuln/detail/CVE-2016-3079 Thu, 14 Apr 2016 14:59:08 +0000 Medium CVE-2016-3079

Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to systems/SystemEntitlements.do; (2) the label parameter to admin/multiorg/EntitlementDetails.do; or the name of a (3) snapshot tag or (4) system group in System Set Manager (SSM).

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2016-2103 – Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow... https://nvd.nist.gov/vuln/detail/CVE-2016-2103 https://nvd.nist.gov/vuln/detail/CVE-2016-2103 Thu, 14 Apr 2016 14:59:07 +0000 Medium CVE-2016-2103

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_1680466951_oldfilterval parameter to systems/PhysicalList.do or (2) unspecified vectors involving systems/VirtualSystemsList.do.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2015-0284 – Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red ... https://nvd.nist.gov/vuln/detail/CVE-2015-0284 https://nvd.nist.gov/vuln/detail/CVE-2015-0284 Thu, 14 Apr 2016 14:59:00 +0000 Medium CVE-2015-0284

Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7811.

CVSS: 5.4 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2013-2143 – The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, doe... https://nvd.nist.gov/vuln/detail/CVE-2013-2143 https://nvd.nist.gov/vuln/detail/CVE-2013-2143 Thu, 17 Apr 2014 14:55:05 +0000 Medium CVE-2013-2143

The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by setting a user account to an administrator account.

CVSS: 6.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2013-4480 – Red Hat Satellite 5.6 and earlier does not disable the web interface that is use... https://nvd.nist.gov/vuln/detail/CVE-2013-4480 https://nvd.nist.gov/vuln/detail/CVE-2013-4480 Mon, 18 Nov 2013 02:55:07 +0000 High CVE-2013-4480

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts.

CVSS: 7.5 · CWE: CWE-668

View on NVD

]]>