Red Hat Satellite 6/foreman

Red Hat · Package

14 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
REXML denial of service vulnerabilityCVE-2024-43398 · GHSA-VMWR-MC7X-5VC3	Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7	Red HatRubyGems	High	Fix reported	2026-09-10
REXML DoS vulnerabilityCVE-2024-41946 · GHSA-5866-49GR-22V4	Red Hat Enterprise Linux 8/ruby:2.5/ruby Red Hat Enterprise Linux 9/pcs	Red HatRubyGems	Medium	Fix reported	2026-09-10
foreman: foreman: API host template render discloses secrets to view_hosts users (incomplete CVE-2026-96659 fix)CVE-2026-107443	Red Hat Satellite 6/foreman	Red Hat	High	No fix reported	Not recorded
foreman: authorization flaw in the Foreman::Controller::UserAware#find_user handling used by Api::V2::PersonalAccessTokensControllerCVE-2026-86322	Red Hat Satellite 6/foreman	Red Hat	High	No fix reported	Not recorded
foreman: authorization flaw in the mail-notification endpoints implemented by Api::V2::MailNotificationsControllerCVE-2026-86323	Red Hat Satellite 6/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: authorization flaw in the Foreman::Controller::UserAware handling used by Api::V2::SshKeysControllerCVE-2026-86324	Red Hat Satellite 6/foreman	Red Hat	Medium	No fix reported	Not recorded
Satellite: Smart class parameters allow users to access other organizationsCVE-2018-14666	Red Hat Satellite 6/foreman	Red Hat	Medium	No fix reported	Not recorded
Satellite: Compute resource credential leakCVE-2020-14371	Red Hat Satellite 6/foreman	Red Hat	Medium	No fix reported	Not recorded
Foreman: Command Injection in "Host Init Config" Template via "Install Packages" Field on ForemanCVE-2024-7700	Red Hat Satellite 6/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: Disclosure of Executed Commands and Outputs in Foreman / Red Hat SatelliteCVE-2025-2157	Red Hat Satellite 6/foreman	Red Hat	Low	No fix reported	Not recorded
Foreman: SSRF to cloud metada service through unvalidated test_url parameters in Foreman configCVE-2026-13316	Red Hat Satellite 6/foreman Red Hat Satellite 6/satellite-utils:el8/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: Cross-tenant disclosure of template revisions via unauthorized audit lookupCVE-2026-81658	Red Hat Satellite 6/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: API filter lookup ignores a search-limited filter permissionCVE-2026-107193	Red Hat Satellite 6/foreman	Red Hat	Medium	No fix reported	Not recorded
foreman: domain and subnet interface API skips host search filtersCVE-2026-107203	Red Hat Satellite 6/foreman	Red Hat	Medium	No fix reported	Not recorded