CVE-2021-4142
Fixed in a distro release EPSS <1%
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.
Products: candlepinproject candlepin
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat satellite 6.10 | candlepin | 0:4.0.15-1.el7sat |
| Red Hat satellite 6.10 | candlepin-selinux | 0:4.0.15-1.el7sat |
| Red Hat satellite 6.11 | candlepin | 0:4.1.13-1.el8sat |
| Red Hat satellite 6.11 | candlepin | 0:4.1.13-1.el7sat |
| Red Hat satellite 6.11 | foreman | 0:3.1.1.21-2.el7sat |
| Red Hat satellite 6.11 | foreman | 0:3.1.1.21-2.el8sat |
| Red Hat satellite 6.11 | libsolv | 0:0.7.22-1.el7pc |
| Red Hat satellite 6.11 | libsolv | 0:0.7.22-1.el8pc |
| Red Hat satellite 6.11 | python-django | 0:3.2.13-1.el8pc |
| Red Hat satellite 6.11 | python-lxml | 0:4.7.1-1.el8pc |
| Red Hat satellite 6.11 | python-sqlparse | 0:0.4.2-2.el8pc |
| Red Hat satellite 6.11 | python38-django | 0:3.2.13-1.el8pc |
| Red Hat satellite 6.11 | rubygem-actionpack | 0:6.0.4.7-1.el8sat |
| Red Hat satellite 6.11 | rubygem-puma | 0:5.6.2-1.el8sat |
| Red Hat satellite 6.11 | rubygem-puma-debuginfo | 0:5.6.2-1.el8sat |
| Red Hat satellite 6.11 | rubygem-puma-debugsource | 0:5.6.2-1.el8sat |
| Red Hat satellite 6.11 | rubygem-sidekiq | 0:5.2.10-1.el8sat |
| Red Hat satellite 6.11 | satellite | 0:6.11.0-2.el7sat |
| Red Hat satellite 6.11 | satellite | 0:6.11.0-2.el8sat |
| Red Hat satellite 6.11 | tfm-rubygem-actionpack | 0:6.0.4.7-1.el7sat |
| Red Hat satellite 6.11 | tfm-rubygem-puma | 0:5.6.2-1.el7sat |
| Red Hat satellite 6.11 | tfm-rubygem-puma-debuginfo | 0:5.6.2-1.el7sat |
| Red Hat satellite 6.11 | tfm-rubygem-sidekiq | 0:5.2.10-1.el7sat |
| Red Hat satellite capsule 6.11 | foreman | 0:3.1.1.21-2.el8sat |
| Red Hat satellite capsule 6.11 | foreman | 0:3.1.1.21-2.el7sat |
| Red Hat satellite capsule 6.11 | libsolv | 0:0.7.22-1.el7pc |
| Red Hat satellite capsule 6.11 | libsolv | 0:0.7.22-1.el8pc |
| Red Hat satellite capsule 6.11 | python-django | 0:3.2.13-1.el8pc |
| Red Hat satellite capsule 6.11 | python-lxml | 0:4.7.1-1.el8pc |
| Red Hat satellite capsule 6.11 | python-sqlparse | 0:0.4.2-2.el8pc |
| Red Hat satellite capsule 6.11 | python38-django | 0:3.2.13-1.el8pc |
| Red Hat satellite capsule 6.11 | satellite | 0:6.11.0-2.el8sat |
| Red Hat satellite capsule 6.11 | satellite | 0:6.11.0-2.el7sat |
| Red Hat satellite utils 6.11 | foreman | 0:3.1.1.21-2.el7sat |
| Red Hat satellite utils 6.11 | foreman | 0:3.1.1.21-2.el8sat |
| Red Hat satellite utils 6.11 | satellite | 0:6.11.0-2.el7sat |
| Red Hat satellite utils 6.11 | satellite | 0:6.11.0-2.el8sat |
| Rocky Linux 8 | libdb | 0:5.3.28-42.el8_4 |