Red Hat Subscription Asset Manager/katello

Red Hat · Package

10 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
katello SQL Injection vulnerabilityCVE-2018-14623 · GHSA-JX5V-788G-QW58	Red Hat Subscription Asset Manager/katello katello	Red HatRubyGems	Medium	No fix reported	2023-11-08
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasyCVE-2016-6345 · GHSA-VXHJ-3X7P-JXP5	org.jboss.resteasy:resteasy-client Red Hat BPM Suite 6/resteasy	MavenRed Hat	Medium	Fix reported	2023-11-08
Katello: CLI - user without access can call "system remove_deletion" commandCVE-2013-4201	Red Hat Subscription Asset Manager/katello	Red Hat	Medium	No fix reported	Not recorded
Katello: /app/controllers/users_controller.rb insufficient privilege checkCVE-2013-2143	Red Hat Subscription Asset Manager/katello	Red Hat	High	No fix reported	Not recorded
Katello: proxied Candlepin calls authorization bypassCVE-2013-4225	CloudForms Management Engine 5/katello Red Hat Subscription Asset Manager/katello	Red Hat	High	No fix reported	Not recorded
katello: DoS in API OAuth authenticationCVE-2013-4120	CloudForms Management Engine 5/katello Red Hat Satellite 6/katello	Red Hat	Low	No fix reported	Not recorded
Katello: Multiple XSS in various entitiesCVE-2013-2101	Red Hat Subscription Asset Manager/katello	Red Hat	Medium	No fix reported	Not recorded
Katello: Username in Notification page XSSCVE-2013-0283	Red Hat Subscription Asset Manager/katello	Red Hat	Medium	No fix reported	Not recorded
XSS: HTML in systems name (when registering) gets interpreted on system information pageCVE-2014-0183	Red Hat Subscription Asset Manager/katello	Red Hat	Medium	No fix reported	Not recorded
Katello: user parameters passed to to_symCVE-2014-3712	Red Hat Satellite 6/katello Red Hat Satellite 6/ruby193-rubygem-katello	Red Hat	Low	No fix reported	Not recorded