CVE-2021-20256
Fixed in a distro release EPSS <1%
A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Products: redhat satellite
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat satellite 6.10 | candlepin | 0:4.0.9-1.el7sat |
| Red Hat satellite 6.10 | foreman | 0:2.5.2.17-2.el7sat |
| Red Hat satellite 6.10 | python-aiohttp | 0:3.7.4-1.el7pc |
| Red Hat satellite 6.10 | python-ecdsa | 0:0.13.3-2.el7pc |
| Red Hat satellite 6.10 | python-pyyaml | 0:5.4.1-1.el7pc |
| Red Hat satellite 6.10 | python-urllib3 | 0:1.26.5-1.el7pc |
| Red Hat satellite 6.10 | python3-django | 0:2.2.24-1.el7pc |
| Red Hat satellite 6.10 | python3-ecdsa | 0:0.13.3-2.el7pc |
| Red Hat satellite 6.10 | python3-pyyaml | 0:5.4.1-1.el7pc |
| Red Hat satellite 6.10 | python3-urllib3 | 0:1.26.5-1.el7pc |
| Red Hat satellite 6.10 | satellite | 0:6.10.0-3.el7sat |
| Red Hat satellite 6.10 | tfm-rubygem-actionpack | 0:6.0.3.7-1.el7sat |
| Red Hat satellite 6.10 | tfm-rubygem-activerecord-session_store | 0:2.0.0-1.el7sat |
| Red Hat satellite 6.10 | tfm-rubygem-addressable | 0:2.8.0-1.el7sat |
| Red Hat satellite 6.10 | tfm-rubygem-nokogiri | 0:1.11.3-2.el7sat |
| Red Hat satellite 6.10 | tfm-rubygem-puma | 0:5.3.2-1.el7sat |
| Red Hat satellite 6.10 | tfm-rubygem-rails | 0:6.0.3.7-1.el7sat |
| Red Hat satellite capsule 6.10 | foreman | 0:2.5.2.17-2.el7sat |
| Red Hat satellite capsule 6.10 | python-aiohttp | 0:3.7.4-1.el7pc |
| Red Hat satellite capsule 6.10 | python-ecdsa | 0:0.13.3-2.el7pc |
| Red Hat satellite capsule 6.10 | python-pyyaml | 0:5.4.1-1.el7pc |
| Red Hat satellite capsule 6.10 | python-urllib3 | 0:1.26.5-1.el7pc |
| Red Hat satellite capsule 6.10 | python3-django | 0:2.2.24-1.el7pc |
| Red Hat satellite capsule 6.10 | python3-ecdsa | 0:0.13.3-2.el7pc |
| Red Hat satellite capsule 6.10 | python3-pyyaml | 0:5.4.1-1.el7pc |
| Red Hat satellite capsule 6.10 | python3-urllib3 | 0:1.26.5-1.el7pc |
| Red Hat satellite capsule 6.10 | satellite | 0:6.10.0-3.el7sat |
| Red Hat satellite capsule 6.10 | satellite-capsule | 0:6.10.0-3.el7sat |
| Red Hat satellite capsule 6.10 | tfm-rubygem-nokogiri | 0:1.11.3-2.el7sat |