{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated Satellite 6.7 packages that fix several bugs are now available for Red Hat Satellite.", "title": "Topic" }, { "category": "general", "text": "Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.\n\nThis update fixes the following bugs:\n\n1826603\tRemote execution job fails with TypeError (no implicit conversion of Array into String\n1846670\tUnable to apply all Errata via Remote Execution on Web UI with \"Select All\"\n1869170\tWhen delete the hypervisor from satellite, the manifest will be broken\n1881186\tBackport of bugzilla 1871873 to Satellite 6.7/Candlepin 2.9\n1884006\tHits Sync uses only old proxy setting\n1884009\tHostgroup tag is never reported in slice\n1884021\tUnable to sync large openshift docker repos\n1884025\t[Regression] Hammer export-legacy Fails with Composite Content Views\n1884026\tHypervisors from Satellite, never makes their way to HBI\n1884027\tAfter data upload from satellite UI it is not visible on cloud.redhat.com.\n1884029\tbuild pxe default do not work when more than 1 provider\n\nUsers of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHBA-2020:4346", "url": "https://access.redhat.com/errata/RHBA-2020:4346" }, { "category": "external", "summary": "1826603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826603" }, { "category": "external", "summary": "1846670", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1846670" }, { "category": "external", "summary": "1869170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1869170" }, { "category": "external", "summary": "1881186", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1881186" }, { "category": "external", "summary": "1884006", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1884006" }, { "category": "external", "summary": "1884009", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1884009" }, { "category": "external", "summary": "1884021", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1884021" }, { "category": "external", "summary": "1884025", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1884025" }, { "category": "external", "summary": "1884026", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1884026" }, { "category": "external", "summary": "1884027", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1884027" }, { "category": "external", "summary": "1884029", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1884029" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_4346.json" } ], "title": "Red Hat Bug Fix Advisory: Satellite 6.7.5 Async Bug Fix Update", "tracking": { "current_release_date": "2026-06-26T22:19:28+00:00", "generator": { "date": "2026-06-26T22:19:28+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.2.6" } }, "id": "RHBA-2020:4346", "initial_release_date": "2020-10-26T19:04:47+00:00", "revision_history": [ { "date": "2020-10-26T19:04:47+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-10-26T19:04:47+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-06-26T22:19:28+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Satellite 6.7", "product": { "name": "Red Hat Satellite 6.7", "product_id": "7Server-Satellite67", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6.7::el7" } } }, { "category": "product_name", "name": "Red Hat Satellite Capsule 6.7", "product": { "name": "Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite_capsule:6.7::el7" } } } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "category": "product_version", "name": "candlepin-0:2.9.30-1.el7sat.noarch", "product": { "name": "candlepin-0:2.9.30-1.el7sat.noarch", "product_id": "candlepin-0:2.9.30-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin@2.9.30-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "candlepin-selinux-0:2.9.30-1.el7sat.noarch", "product": { "name": "candlepin-selinux-0:2.9.30-1.el7sat.noarch", "product_id": "candlepin-selinux-0:2.9.30-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin-selinux@2.9.30-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "product": { "name": "pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "product_id": "pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/pulp-docker-admin-extensions@3.2.7-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "product": { "name": "pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "product_id": "pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/pulp-docker-plugins@3.2.7-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "product": { "name": "python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "product_id": "python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-pulp-docker-common@3.2.7-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "python-nectar-0:1.6.2-1.el7sat.noarch", "product": { "name": "python-nectar-0:1.6.2-1.el7sat.noarch", "product_id": "python-nectar-0:1.6.2-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-nectar@1.6.2-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-0:6.7.5-1.el7sat.noarch", "product": { "name": "satellite-0:6.7.5-1.el7sat.noarch", "product_id": "satellite-0:6.7.5-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite@6.7.5-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-capsule-0:6.7.5-1.el7sat.noarch", "product": { "name": "satellite-capsule-0:6.7.5-1.el7sat.noarch", "product_id": "satellite-capsule-0:6.7.5-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-capsule@6.7.5-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-cli-0:6.7.5-1.el7sat.noarch", "product": { "name": "satellite-cli-0:6.7.5-1.el7sat.noarch", "product_id": "satellite-cli-0:6.7.5-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-cli@6.7.5-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-common-0:6.7.5-1.el7sat.noarch", "product": { "name": "satellite-common-0:6.7.5-1.el7sat.noarch", "product_id": "satellite-common-0:6.7.5-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-common@6.7.5-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "product": { "name": "satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "product_id": "satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-debug-tools@6.7.5-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.noarch", "product": { "name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.noarch", "product_id": "tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-foreman_remote_execution@2.0.10.3-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.3-1.el7sat.noarch", "product": { "name": "tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.3-1.el7sat.noarch", "product_id": "tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.3-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-foreman_remote_execution-cockpit@2.0.10.3-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.noarch", "product": { "name": "tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.noarch", "product_id": "tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-foreman_rh_cloud@1.0.12-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "tfm-rubygem-katello-0:3.14.0.32-1.el7sat.noarch", "product": { "name": "tfm-rubygem-katello-0:3.14.0.32-1.el7sat.noarch", "product_id": "tfm-rubygem-katello-0:3.14.0.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-katello@3.14.0.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-cli-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-cli-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-cli-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-cli@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-debug-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-debug-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-debug-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-debug@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-ec2-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-ec2-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-ec2-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-ec2@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-gce-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-gce-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-gce-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-gce@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-journald-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-journald-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-journald-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-journald@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-libvirt-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-libvirt-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-libvirt-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-libvirt@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-openstack-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-openstack-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-openstack-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-openstack@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-ovirt-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-ovirt-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-ovirt-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-ovirt@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-postgresql-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-postgresql-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-postgresql-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-postgresql@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-rackspace-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-rackspace-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-rackspace-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-rackspace@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-telemetry-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-telemetry-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-telemetry-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-telemetry@1.24.1.32-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-vmware-0:1.24.1.32-1.el7sat.noarch", "product": { "name": "foreman-vmware-0:1.24.1.32-1.el7sat.noarch", "product_id": "foreman-vmware-0:1.24.1.32-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-vmware@1.24.1.32-1.el7sat?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "candlepin-0:2.9.30-1.el7sat.src", "product": { "name": "candlepin-0:2.9.30-1.el7sat.src", "product_id": "candlepin-0:2.9.30-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin@2.9.30-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "pulp-docker-0:3.2.7-1.el7sat.src", "product": { "name": "pulp-docker-0:3.2.7-1.el7sat.src", "product_id": "pulp-docker-0:3.2.7-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/pulp-docker@3.2.7-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "python-nectar-0:1.6.2-1.el7sat.src", "product": { "name": "python-nectar-0:1.6.2-1.el7sat.src", "product_id": "python-nectar-0:1.6.2-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-nectar@1.6.2-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "satellite-0:6.7.5-1.el7sat.src", "product": { "name": "satellite-0:6.7.5-1.el7sat.src", "product_id": "satellite-0:6.7.5-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite@6.7.5-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.src", "product": { "name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.src", "product_id": "tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-foreman_remote_execution@2.0.10.3-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.src", "product": { "name": "tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.src", "product_id": "tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-foreman_rh_cloud@1.0.12-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "tfm-rubygem-katello-0:3.14.0.32-1.el7sat.src", "product": { "name": "tfm-rubygem-katello-0:3.14.0.32-1.el7sat.src", "product_id": "tfm-rubygem-katello-0:3.14.0.32-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-katello@3.14.0.32-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "foreman-0:1.24.1.32-1.el7sat.src", "product": { "name": "foreman-0:1.24.1.32-1.el7sat.src", "product_id": "foreman-0:1.24.1.32-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman@1.24.1.32-1.el7sat?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "foreman-0:1.24.1.32-1.el7sat.src as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:foreman-0:1.24.1.32-1.el7sat.src" }, "product_reference": "foreman-0:1.24.1.32-1.el7sat.src", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:foreman-debug-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-debug-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "pulp-docker-0:3.2.7-1.el7sat.src as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:pulp-docker-0:3.2.7-1.el7sat.src" }, "product_reference": "pulp-docker-0:3.2.7-1.el7sat.src", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch" }, "product_reference": "pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "pulp-docker-plugins-0:3.2.7-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:pulp-docker-plugins-0:3.2.7-1.el7sat.noarch" }, "product_reference": "pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "python-nectar-0:1.6.2-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:python-nectar-0:1.6.2-1.el7sat.noarch" }, "product_reference": "python-nectar-0:1.6.2-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "python-nectar-0:1.6.2-1.el7sat.src as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:python-nectar-0:1.6.2-1.el7sat.src" }, "product_reference": "python-nectar-0:1.6.2-1.el7sat.src", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulp-docker-common-0:3.2.7-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:python-pulp-docker-common-0:3.2.7-1.el7sat.noarch" }, "product_reference": "python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.7.5-1.el7sat.src as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:satellite-0:6.7.5-1.el7sat.src" }, "product_reference": "satellite-0:6.7.5-1.el7sat.src", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-capsule-0:6.7.5-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:satellite-capsule-0:6.7.5-1.el7sat.noarch" }, "product_reference": "satellite-capsule-0:6.7.5-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-common-0:6.7.5-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:satellite-common-0:6.7.5-1.el7sat.noarch" }, "product_reference": "satellite-common-0:6.7.5-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-debug-tools-0:6.7.5-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7", "product_id": "7Server-Capsule67:satellite-debug-tools-0:6.7.5-1.el7sat.noarch" }, "product_reference": "satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule67" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-0:2.9.30-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:candlepin-0:2.9.30-1.el7sat.noarch" }, "product_reference": "candlepin-0:2.9.30-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-0:2.9.30-1.el7sat.src as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:candlepin-0:2.9.30-1.el7sat.src" }, "product_reference": "candlepin-0:2.9.30-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-selinux-0:2.9.30-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:candlepin-selinux-0:2.9.30-1.el7sat.noarch" }, "product_reference": "candlepin-selinux-0:2.9.30-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-0:1.24.1.32-1.el7sat.src as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-0:1.24.1.32-1.el7sat.src" }, "product_reference": "foreman-0:1.24.1.32-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-cli-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-cli-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-cli-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-debug-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-debug-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ec2-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-ec2-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-ec2-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-gce-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-gce-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-gce-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-journald-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-journald-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-journald-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-libvirt-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-libvirt-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-libvirt-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-openstack-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-openstack-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-openstack-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ovirt-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-ovirt-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-ovirt-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-postgresql-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-postgresql-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-postgresql-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-rackspace-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-rackspace-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-rackspace-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-telemetry-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-telemetry-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-telemetry-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-vmware-0:1.24.1.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:foreman-vmware-0:1.24.1.32-1.el7sat.noarch" }, "product_reference": "foreman-vmware-0:1.24.1.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "pulp-docker-0:3.2.7-1.el7sat.src as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:pulp-docker-0:3.2.7-1.el7sat.src" }, "product_reference": "pulp-docker-0:3.2.7-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch" }, "product_reference": "pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "pulp-docker-plugins-0:3.2.7-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:pulp-docker-plugins-0:3.2.7-1.el7sat.noarch" }, "product_reference": "pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "python-nectar-0:1.6.2-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:python-nectar-0:1.6.2-1.el7sat.noarch" }, "product_reference": "python-nectar-0:1.6.2-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "python-nectar-0:1.6.2-1.el7sat.src as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:python-nectar-0:1.6.2-1.el7sat.src" }, "product_reference": "python-nectar-0:1.6.2-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulp-docker-common-0:3.2.7-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:python-pulp-docker-common-0:3.2.7-1.el7sat.noarch" }, "product_reference": "python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.7.5-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:satellite-0:6.7.5-1.el7sat.noarch" }, "product_reference": "satellite-0:6.7.5-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.7.5-1.el7sat.src as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:satellite-0:6.7.5-1.el7sat.src" }, "product_reference": "satellite-0:6.7.5-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-capsule-0:6.7.5-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:satellite-capsule-0:6.7.5-1.el7sat.noarch" }, "product_reference": "satellite-capsule-0:6.7.5-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-cli-0:6.7.5-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:satellite-cli-0:6.7.5-1.el7sat.noarch" }, "product_reference": "satellite-cli-0:6.7.5-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-common-0:6.7.5-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:satellite-common-0:6.7.5-1.el7sat.noarch" }, "product_reference": "satellite-common-0:6.7.5-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-debug-tools-0:6.7.5-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:satellite-debug-tools-0:6.7.5-1.el7sat.noarch" }, "product_reference": "satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.noarch" }, "product_reference": "tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.src as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.src" }, "product_reference": "tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.3-1.el7sat.noarch" }, "product_reference": "tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.3-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.noarch" }, "product_reference": "tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.src as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.src" }, "product_reference": "tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-katello-0:3.14.0.32-1.el7sat.noarch as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.32-1.el7sat.noarch" }, "product_reference": "tfm-rubygem-katello-0:3.14.0.32-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite67" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-katello-0:3.14.0.32-1.el7sat.src as a component of Red Hat Satellite 6.7", "product_id": "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.32-1.el7sat.src" }, "product_reference": "tfm-rubygem-katello-0:3.14.0.32-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite67" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Stefan Meyer" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2020-14380", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2020-08-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1873926" } ], "notes": [ { "category": "description", "text": "Red Hat Satellite's external authentication component is vulnerable to a full account takeover flaw. This flaw allows an attacker with an authenticated account on Single sign-on (SSO) to gain elevated privileges of existing local users. This issue only affects users who have configured Satellite to use Apache SSO or Open ID Connect external authentication sources, and that have not disabled the auto-creation of users on login. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "Satellite: Local user impersonation by Single sign-on (SSO) user leads to account takeover", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Capsule67:foreman-0:1.24.1.32-1.el7sat.src", "7Server-Capsule67:foreman-debug-0:1.24.1.32-1.el7sat.noarch", "7Server-Capsule67:pulp-docker-0:3.2.7-1.el7sat.src", "7Server-Capsule67:pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:python-nectar-0:1.6.2-1.el7sat.noarch", "7Server-Capsule67:python-nectar-0:1.6.2-1.el7sat.src", "7Server-Capsule67:python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:satellite-0:6.7.5-1.el7sat.src", "7Server-Capsule67:satellite-capsule-0:6.7.5-1.el7sat.noarch", "7Server-Capsule67:satellite-common-0:6.7.5-1.el7sat.noarch", "7Server-Capsule67:satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:candlepin-0:2.9.30-1.el7sat.noarch", "7Server-Satellite67:candlepin-0:2.9.30-1.el7sat.src", "7Server-Satellite67:candlepin-selinux-0:2.9.30-1.el7sat.noarch", "7Server-Satellite67:foreman-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-0:1.24.1.32-1.el7sat.src", "7Server-Satellite67:foreman-cli-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-debug-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-ec2-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-gce-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-journald-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-libvirt-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-openstack-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-ovirt-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-postgresql-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-rackspace-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-telemetry-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-vmware-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:pulp-docker-0:3.2.7-1.el7sat.src", "7Server-Satellite67:pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:python-nectar-0:1.6.2-1.el7sat.noarch", "7Server-Satellite67:python-nectar-0:1.6.2-1.el7sat.src", "7Server-Satellite67:python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:satellite-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-0:6.7.5-1.el7sat.src", "7Server-Satellite67:satellite-capsule-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-cli-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-common-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.src", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.3-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.src", "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.32-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.32-1.el7sat.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-14380" }, { "category": "external", "summary": "RHBZ#1873926", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1873926" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-14380", "url": "https://www.cve.org/CVERecord?id=CVE-2020-14380" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14380", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14380" } ], "release_date": "2020-08-31T02:44:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-10-26T19:04:47+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts", "product_ids": [ "7Server-Capsule67:foreman-0:1.24.1.32-1.el7sat.src", "7Server-Capsule67:foreman-debug-0:1.24.1.32-1.el7sat.noarch", "7Server-Capsule67:pulp-docker-0:3.2.7-1.el7sat.src", "7Server-Capsule67:pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:python-nectar-0:1.6.2-1.el7sat.noarch", "7Server-Capsule67:python-nectar-0:1.6.2-1.el7sat.src", "7Server-Capsule67:python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:satellite-0:6.7.5-1.el7sat.src", "7Server-Capsule67:satellite-capsule-0:6.7.5-1.el7sat.noarch", "7Server-Capsule67:satellite-common-0:6.7.5-1.el7sat.noarch", "7Server-Capsule67:satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:candlepin-0:2.9.30-1.el7sat.noarch", "7Server-Satellite67:candlepin-0:2.9.30-1.el7sat.src", "7Server-Satellite67:candlepin-selinux-0:2.9.30-1.el7sat.noarch", "7Server-Satellite67:foreman-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-0:1.24.1.32-1.el7sat.src", "7Server-Satellite67:foreman-cli-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-debug-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-ec2-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-gce-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-journald-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-libvirt-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-openstack-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-ovirt-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-postgresql-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-rackspace-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-telemetry-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-vmware-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:pulp-docker-0:3.2.7-1.el7sat.src", "7Server-Satellite67:pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:python-nectar-0:1.6.2-1.el7sat.noarch", "7Server-Satellite67:python-nectar-0:1.6.2-1.el7sat.src", "7Server-Satellite67:python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:satellite-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-0:6.7.5-1.el7sat.src", "7Server-Satellite67:satellite-capsule-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-cli-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-common-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.src", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.3-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.src", "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.32-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.32-1.el7sat.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2020:4346" }, { "category": "workaround", "details": "This issue can be mitigated by disabling the external login if a Satellite user has their authentication set to INTERNAL.", "product_ids": [ "7Server-Capsule67:foreman-0:1.24.1.32-1.el7sat.src", "7Server-Capsule67:foreman-debug-0:1.24.1.32-1.el7sat.noarch", "7Server-Capsule67:pulp-docker-0:3.2.7-1.el7sat.src", "7Server-Capsule67:pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:python-nectar-0:1.6.2-1.el7sat.noarch", "7Server-Capsule67:python-nectar-0:1.6.2-1.el7sat.src", "7Server-Capsule67:python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:satellite-0:6.7.5-1.el7sat.src", "7Server-Capsule67:satellite-capsule-0:6.7.5-1.el7sat.noarch", "7Server-Capsule67:satellite-common-0:6.7.5-1.el7sat.noarch", "7Server-Capsule67:satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:candlepin-0:2.9.30-1.el7sat.noarch", "7Server-Satellite67:candlepin-0:2.9.30-1.el7sat.src", "7Server-Satellite67:candlepin-selinux-0:2.9.30-1.el7sat.noarch", "7Server-Satellite67:foreman-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-0:1.24.1.32-1.el7sat.src", "7Server-Satellite67:foreman-cli-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-debug-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-ec2-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-gce-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-journald-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-libvirt-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-openstack-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-ovirt-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-postgresql-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-rackspace-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-telemetry-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-vmware-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:pulp-docker-0:3.2.7-1.el7sat.src", "7Server-Satellite67:pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:python-nectar-0:1.6.2-1.el7sat.noarch", "7Server-Satellite67:python-nectar-0:1.6.2-1.el7sat.src", "7Server-Satellite67:python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:satellite-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-0:6.7.5-1.el7sat.src", "7Server-Satellite67:satellite-capsule-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-cli-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-common-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.src", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.3-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.src", "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.32-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.32-1.el7sat.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-Capsule67:foreman-0:1.24.1.32-1.el7sat.src", "7Server-Capsule67:foreman-debug-0:1.24.1.32-1.el7sat.noarch", "7Server-Capsule67:pulp-docker-0:3.2.7-1.el7sat.src", "7Server-Capsule67:pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:python-nectar-0:1.6.2-1.el7sat.noarch", "7Server-Capsule67:python-nectar-0:1.6.2-1.el7sat.src", "7Server-Capsule67:python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "7Server-Capsule67:satellite-0:6.7.5-1.el7sat.src", "7Server-Capsule67:satellite-capsule-0:6.7.5-1.el7sat.noarch", "7Server-Capsule67:satellite-common-0:6.7.5-1.el7sat.noarch", "7Server-Capsule67:satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:candlepin-0:2.9.30-1.el7sat.noarch", "7Server-Satellite67:candlepin-0:2.9.30-1.el7sat.src", "7Server-Satellite67:candlepin-selinux-0:2.9.30-1.el7sat.noarch", "7Server-Satellite67:foreman-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-0:1.24.1.32-1.el7sat.src", "7Server-Satellite67:foreman-cli-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-debug-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-ec2-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-gce-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-journald-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-libvirt-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-openstack-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-ovirt-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-postgresql-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-rackspace-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-telemetry-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:foreman-vmware-0:1.24.1.32-1.el7sat.noarch", "7Server-Satellite67:pulp-docker-0:3.2.7-1.el7sat.src", "7Server-Satellite67:pulp-docker-admin-extensions-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:pulp-docker-plugins-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:python-nectar-0:1.6.2-1.el7sat.noarch", "7Server-Satellite67:python-nectar-0:1.6.2-1.el7sat.src", "7Server-Satellite67:python-pulp-docker-common-0:3.2.7-1.el7sat.noarch", "7Server-Satellite67:satellite-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-0:6.7.5-1.el7sat.src", "7Server-Satellite67:satellite-capsule-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-cli-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-common-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:satellite-debug-tools-0:6.7.5-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.3-1.el7sat.src", "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.3-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.12-1.el7sat.src", "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.32-1.el7sat.noarch", "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.32-1.el7sat.src" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "Satellite: Local user impersonation by Single sign-on (SSO) user leads to account takeover" } ] }