CVE-2020-10710
Fixed in a distro release EPSS <1%
A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.
Products: theforeman foreman
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat satellite 6.7 | ansiblerole-satellite-receptor-installer | 0:0.6.6.1-1.el7sat |
| Red Hat satellite 6.7 | foreman | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-cli | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-debug | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-ec2 | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-gce | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-installer | 1:1.24.1.22-1.el7sat |
| Red Hat satellite 6.7 | foreman-installer-katello | 1:1.24.1.22-1.el7sat |
| Red Hat satellite 6.7 | foreman-journald | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-libvirt | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-openstack | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-ovirt | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-postgresql | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-rackspace | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-telemetry | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | foreman-vmware | 0:1.24.1.25-1.el7sat |
| Red Hat satellite 6.7 | pulp | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | pulp-admin-client | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | pulp-maintenance | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | pulp-selinux | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | pulp-server | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | python-pulp-bindings | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | python-pulp-client-lib | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | python-pulp-common | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | python-pulp-oid_validation | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | python-pulp-repoauth | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | python-pulp-streamer | 0:2.21.0.2-1.el7sat |
| Red Hat satellite 6.7 | python-receptor-satellite | 0:1.0.1-2.el7sat |
| Red Hat satellite 6.7 | python3-receptor-satellite | 0:1.0.1-2.el7sat |
| Red Hat satellite 6.7 | satellite | 0:6.7.3-1.el7sat |
| Red Hat satellite 6.7 | satellite-capsule | 0:6.7.3-1.el7sat |
| Red Hat satellite 6.7 | satellite-cli | 0:6.7.3-1.el7sat |
| Red Hat satellite 6.7 | satellite-common | 0:6.7.3-1.el7sat |
| Red Hat satellite 6.7 | satellite-debug-tools | 0:6.7.3-1.el7sat |
| Red Hat satellite 6.7 | tfm-rubygem-foreman-tasks | 0:0.17.5.7-1.el7sat |
| Red Hat satellite 6.7 | tfm-rubygem-foreman_ansible | 0:4.0.3.7-1.el7sat |
| Red Hat satellite 6.7 | tfm-rubygem-foreman_remote_execution | 0:2.0.10.2-1.el7sat |
| Red Hat satellite 6.7 | tfm-rubygem-foreman_remote_execution-cockpit | 0:2.0.10.2-1.el7sat |
| Red Hat satellite 6.7 | tfm-rubygem-katello | 0:3.14.0.27-1.el7sat |
| Red Hat satellite capsule 6.7 | ansiblerole-satellite-receptor-installer | 0:0.6.6.1-1.el7sat |
| Red Hat satellite capsule 6.7 | foreman | 0:1.24.1.25-1.el7sat |
| Red Hat satellite capsule 6.7 | foreman-debug | 0:1.24.1.25-1.el7sat |
| Red Hat satellite capsule 6.7 | foreman-installer | 1:1.24.1.22-1.el7sat |
| Red Hat satellite capsule 6.7 | foreman-installer-katello | 1:1.24.1.22-1.el7sat |
| Red Hat satellite capsule 6.7 | pulp | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | pulp-admin-client | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | pulp-maintenance | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | pulp-nodes-child | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | pulp-nodes-common | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | pulp-nodes-parent | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | pulp-selinux | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | pulp-server | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | python-pulp-agent-lib | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | python-pulp-bindings | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | python-pulp-client-lib | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | python-pulp-common | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | python-pulp-oid_validation | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | python-pulp-repoauth | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | python-pulp-streamer | 0:2.21.0.2-1.el7sat |
| Red Hat satellite capsule 6.7 | satellite | 0:6.7.3-1.el7sat |
| Red Hat satellite capsule 6.7 | satellite-capsule | 0:6.7.3-1.el7sat |
| Red Hat satellite capsule 6.7 | satellite-common | 0:6.7.3-1.el7sat |
| Red Hat satellite capsule 6.7 | satellite-debug-tools | 0:6.7.3-1.el7sat |