CVE Vulnerabilities

CVE-2016-3108

Improper Link Resolution Before File Access ('Link Following')

Published: Jun 08, 2017 | Modified: Apr 20, 2025
CVSS 3.x
7.1
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
3.6 LOW
AV:L/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
4.7 MODERATE
AV:L/AC:H/Au:N/C:P/I:C/A:N
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack.

Weakness

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Affected Software

NameVendorStart VersionEnd Version
PulpPulpproject*2.8.2-1 (including)
Red Hat Satellite 6.2 for RHEL 6RedHatcandlepin-0:0.9.54.7-1.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatforeman-0:1.11.0.49-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatforeman-installer-1:1.11.0.9-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatforeman-proxy-0:1.11.0.4-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatforeman-selinux-0:1.11.0.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatgofer-0:2.7.6-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-0:3.0.0-10.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-agent-0:2.5.0-5.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-certs-tools-0:2.4.0-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-client-bootstrap-0:1.1.0-2.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-installer-base-0:3.0.0.56-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-selinux-0:3.0.1.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpulp-0:2.8.3.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpulp-docker-0:2.0.1.1-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpulp-katello-0:1.0.1-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpulp-puppet-0:2.8.3.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpulp-rpm-0:2.8.3.5-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpuppet-0:3.8.6-2.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpuppet-foreman_scap_client-0:0.3.3-10.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatpuppetlabs-stdlib-0:4.2.1-1.20140510git08b00d9.el6_6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpython-celery-0:3.1.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpython-nectar-0:1.5.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpython-qpid-0:0.30-9.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatqpid-cpp-0:0.30-11.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatqpid-dispatch-0:0.4-13.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatqpid-proton-0:0.9-16.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatqpid-qmf-0:0.30-5.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatqpid-tools-0:0.30-4.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-apipie-bindings-0:0.0.14-2.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-foreman_scap_client-0:0.1.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-kafo-0:0.7.6-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-kafo_parsers-0:0.0.6-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-kafo_wizards-0:0.0.1-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-rubyipmi-0:0.10.0-1.el6_6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-sinatra-1:1.3.6-27.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_discovery-0:1.0.3-3.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_discovery_image-0:1.0.5-4.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_dynflow-0:0.1.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_openscap-0:0.5.3.6-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_pulp-0:1.2.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_remote_execution_ssh-0:0.1.2-2.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-tilt-0:1.3.3-18.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatsatellite-0:6.2.0-21.1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatsatellite-installer-0:6.2.0.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-bastion-0:3.2.0.9-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-dynflow-0:0.8.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_bootdisk-0:6.1.0.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_discovery-0:5.0.0.8-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_docker-0:2.0.1.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_hooks-0:0.3.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_openscap-0:0.5.3.17-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman-redhat_access-0:1.0.10-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_remote_execution-0:0.3.0.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman-tasks-0:0.7.14.6-3.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_theme_satellite-0:0.1.25-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli-0:0.5.1.11-4.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_csv-0:2.0.0.1-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman-0:0.5.1.9-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman_bootdisk-0:0.1.3.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman_discovery-0:0.0.2.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman_docker-0:0.0.6-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman_remote_execution-0:0.0.5.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman_tasks-0:0.0.10.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_import-0:0.11.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_katello-0:0.0.22.23-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-katello-0:3.0.0.68-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-ldap_fluff-0:0.4.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-qpid_messaging-0:0.30.0-7.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-redhat_access_lib-0:1.0.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-smart_proxy_dynflow_core-0:0.1.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-smart_proxy_remote_execution_ssh_core-0:0.1.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatcandlepin-0:0.9.54.7-1.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatforeman-0:1.11.0.49-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatforeman-installer-1:1.11.0.9-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatforeman-proxy-0:1.11.0.4-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatforeman-selinux-0:1.11.0.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatgofer-0:2.7.6-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-0:3.0.0-10.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-agent-0:2.5.0-5.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-certs-tools-0:2.4.0-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-client-bootstrap-0:1.1.0-2.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-installer-base-0:3.0.0.56-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatkatello-selinux-0:3.0.1.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpulp-0:2.8.3.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpulp-docker-0:2.0.1.1-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpulp-katello-0:1.0.1-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpulp-puppet-0:2.8.3.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpulp-rpm-0:2.8.3.5-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpuppet-0:3.8.6-2.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpuppet-foreman_scap_client-0:0.3.3-10.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatpuppetlabs-stdlib-0:4.2.1-1.20140510git08b00d9.el6_6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpython-celery-0:3.1.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpython-nectar-0:1.5.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatpython-qpid-0:0.30-9.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatqpid-cpp-0:0.30-11.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatqpid-dispatch-0:0.4-13.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatqpid-proton-0:0.9-16.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatqpid-qmf-0:0.30-5.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatqpid-tools-0:0.30-4.el6*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-apipie-bindings-0:0.0.14-2.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-foreman_scap_client-0:0.1.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-kafo-0:0.7.6-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-kafo_parsers-0:0.0.6-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-kafo_wizards-0:0.0.1-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-rubyipmi-0:0.10.0-1.el6_6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-sinatra-1:1.3.6-27.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_discovery-0:1.0.3-3.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_discovery_image-0:1.0.5-4.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_dynflow-0:0.1.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_openscap-0:0.5.3.6-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_pulp-0:1.2.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-smart_proxy_remote_execution_ssh-0:0.1.2-2.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatrubygem-tilt-0:1.3.3-18.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatsatellite-0:6.2.0-21.1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHatsatellite-installer-0:6.2.0.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-bastion-0:3.2.0.9-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-dynflow-0:0.8.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_bootdisk-0:6.1.0.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_discovery-0:5.0.0.8-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_docker-0:2.0.1.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_hooks-0:0.3.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_openscap-0:0.5.3.17-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman-redhat_access-0:1.0.10-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_remote_execution-0:0.3.0.11-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman-tasks-0:0.7.14.6-3.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-foreman_theme_satellite-0:0.1.25-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli-0:0.5.1.11-4.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_csv-0:2.0.0.1-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman-0:0.5.1.9-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman_bootdisk-0:0.1.3.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman_discovery-0:0.0.2.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman_docker-0:0.0.6-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman_remote_execution-0:0.0.5.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_foreman_tasks-0:0.0.10.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_import-0:0.11.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-hammer_cli_katello-0:0.0.22.23-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-katello-0:3.0.0.68-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-ldap_fluff-0:0.4.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-qpid_messaging-0:0.30.0-7.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-redhat_access_lib-0:1.0.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-smart_proxy_dynflow_core-0:0.1.3-1.el6sat*
Red Hat Satellite 6.2 for RHEL 6RedHattfm-rubygem-smart_proxy_remote_execution_ssh_core-0:0.1.2-1.el6sat*
Red Hat Satellite 6.2 for RHEL 7RedHatcandlepin-0:0.9.54.7-1.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatforeman-0:1.11.0.49-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatforeman-installer-1:1.11.0.9-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatforeman-proxy-0:1.11.0.4-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatforeman-selinux-0:1.11.0.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatgofer-0:2.7.6-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-0:3.0.0-10.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-agent-0:2.5.0-5.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-certs-tools-0:2.4.0-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-client-bootstrap-0:1.1.0-2.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-installer-base-0:3.0.0.56-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-selinux-0:3.0.1.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatlibtasn1-0:3.8-3.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatostree-0:2016.5-3.atomic.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-0:2.8.3.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-docker-0:2.0.1.1-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-katello-0:1.0.1-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-ostree-0:1.1.1-2.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-puppet-0:2.8.3.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-rpm-0:2.8.3.5-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpuppet-0:3.8.6-2.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpuppet-foreman_scap_client-0:0.3.3-10.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpuppetlabs-stdlib-0:4.2.1-1.20140510git08b00d9.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpython-nectar-0:1.5.1-3.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatqpid-cpp-0:0.30-11.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatqpid-dispatch-0:0.4-13.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatqpid-proton-0:0.9-16.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatqpid-qmf-0:0.30-5.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatqpid-tools-0:0.30-4.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-apipie-bindings-0:0.0.14-2.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-foreman_scap_client-0:0.1.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-kafo-0:0.7.6-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-kafo_parsers-0:0.0.6-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-kafo_wizards-0:0.0.1-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_discovery-0:1.0.3-3.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_discovery_image-0:1.0.5-4.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_dynflow-0:0.1.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_openscap-0:0.5.3.6-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_pulp-0:1.2.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_remote_execution_ssh-0:0.1.2-2.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatsatellite-0:6.2.0-21.1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatsatellite-installer-0:6.2.0.11-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-bastion-0:3.2.0.9-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-dynflow-0:0.8.11-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_bootdisk-0:6.1.0.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_discovery-0:5.0.0.8-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_docker-0:2.0.1.11-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_hooks-0:0.3.11-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_openscap-0:0.5.3.17-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman-redhat_access-0:1.0.10-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_remote_execution-0:0.3.0.11-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman-tasks-0:0.7.14.6-3.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_theme_satellite-0:0.1.25-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli-0:0.5.1.11-4.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_csv-0:2.0.0.1-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman-0:0.5.1.9-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman_bootdisk-0:0.1.3.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman_discovery-0:0.0.2.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman_docker-0:0.0.6-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman_remote_execution-0:0.0.5.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman_tasks-0:0.0.10.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_import-0:0.11.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_katello-0:0.0.22.23-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-katello-0:3.0.0.68-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-ldap_fluff-0:0.4.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-qpid_messaging-0:0.30.0-7.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-redhat_access_lib-0:1.0.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-smart_proxy_dynflow_core-0:0.1.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-smart_proxy_remote_execution_ssh_core-0:0.1.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatcandlepin-0:0.9.54.7-1.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatforeman-0:1.11.0.49-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatforeman-installer-1:1.11.0.9-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatforeman-proxy-0:1.11.0.4-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatforeman-selinux-0:1.11.0.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatgofer-0:2.7.6-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-0:3.0.0-10.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-agent-0:2.5.0-5.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-certs-tools-0:2.4.0-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-client-bootstrap-0:1.1.0-2.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-installer-base-0:3.0.0.56-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatkatello-selinux-0:3.0.1.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatlibtasn1-0:3.8-3.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatostree-0:2016.5-3.atomic.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-0:2.8.3.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-docker-0:2.0.1.1-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-katello-0:1.0.1-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-ostree-0:1.1.1-2.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-puppet-0:2.8.3.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpulp-rpm-0:2.8.3.5-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpuppet-0:3.8.6-2.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpuppet-foreman_scap_client-0:0.3.3-10.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpuppetlabs-stdlib-0:4.2.1-1.20140510git08b00d9.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatpython-nectar-0:1.5.1-3.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatqpid-cpp-0:0.30-11.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatqpid-dispatch-0:0.4-13.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatqpid-proton-0:0.9-16.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatqpid-qmf-0:0.30-5.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatqpid-tools-0:0.30-4.el7*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-apipie-bindings-0:0.0.14-2.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-foreman_scap_client-0:0.1.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-kafo-0:0.7.6-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-kafo_parsers-0:0.0.6-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-kafo_wizards-0:0.0.1-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_discovery-0:1.0.3-3.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_discovery_image-0:1.0.5-4.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_dynflow-0:0.1.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_openscap-0:0.5.3.6-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_pulp-0:1.2.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatrubygem-smart_proxy_remote_execution_ssh-0:0.1.2-2.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatsatellite-0:6.2.0-21.1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHatsatellite-installer-0:6.2.0.11-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-bastion-0:3.2.0.9-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-dynflow-0:0.8.11-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_bootdisk-0:6.1.0.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_discovery-0:5.0.0.8-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_docker-0:2.0.1.11-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_hooks-0:0.3.11-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_openscap-0:0.5.3.17-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman-redhat_access-0:1.0.10-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_remote_execution-0:0.3.0.11-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman-tasks-0:0.7.14.6-3.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-foreman_theme_satellite-0:0.1.25-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli-0:0.5.1.11-4.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_csv-0:2.0.0.1-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman-0:0.5.1.9-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman_bootdisk-0:0.1.3.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman_discovery-0:0.0.2.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman_docker-0:0.0.6-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman_remote_execution-0:0.0.5.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_foreman_tasks-0:0.0.10.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_import-0:0.11.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-hammer_cli_katello-0:0.0.22.23-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-katello-0:3.0.0.68-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-ldap_fluff-0:0.4.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-qpid_messaging-0:0.30.0-7.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-redhat_access_lib-0:1.0.2-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-smart_proxy_dynflow_core-0:0.1.3-1.el7sat*
Red Hat Satellite 6.2 for RHEL 7RedHattfm-rubygem-smart_proxy_remote_execution_ssh_core-0:0.1.2-1.el7sat*

Potential Mitigations

  • Follow the principle of least privilege when assigning access rights to entities in a software system.
  • Denying access to a file can prevent an attacker from replacing that file with a link to a sensitive file. Ensure good compartmentalization in the system to provide protected areas that can be trusted.

References