CVE Vulnerabilities

CVE-2017-10689

Improper Privilege Management

Published: Feb 09, 2018 | Modified: Oct 03, 2019
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
2.8 LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Ubuntu
MEDIUM

In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Puppet Puppet * 5.3.4 (excluding)
Puppet Puppet 1.10.0 (including) 1.10.10 (excluding)
Puppet_enterprise Puppet * 2016.4.10 (excluding)
Puppet_enterprise Puppet 2017.1.0 (including) 2017.3.4 (excluding)
Red Hat Satellite 6.4 for RHEL 7 RedHat ansiblerole-insights-client-0:1.5-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat candlepin-0:2.4.8-1.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat createrepo_c-0:0.7.4-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat foreman-0:1.18.0.37-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat foreman-bootloaders-redhat-0:201801241201-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat foreman-installer-1:1.18.0.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat foreman-proxy-0:1.18.0.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat foreman-selinux-0:1.18.0.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat gofer-0:2.12.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat hfsplus-tools-0:332.14-12.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat katello-0:3.7.0-8.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat katello-certs-tools-0:2.4.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat katello-client-bootstrap-0:1.6.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat katello-installer-base-0:3.7.0.10-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat katello-selinux-0:3.0.3-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat kobo-0:0.5.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat libstemmer-0:0-2.585svn.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat libwebsockets-0:2.1.0-3.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat liquibase-0:3.1.0-1.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat livecd-tools-1:20.4-1.6.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat mod_xsendfile-0:0.12-10.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat mongodb-0:2.6.11-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat ostree-0:2017.1-2.atomic.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat pcp-mmvstatsd-0:0.4-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat pulp-0:2.16.4.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat pulp-docker-0:3.1.4.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat pulp-katello-0:1.0.2-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat pulp-ostree-0:1.3.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat pulp-puppet-0:2.16.4-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat pulp-rpm-0:2.16.4.1-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat puppet-agent-0:5.5.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat puppet-agent-oauth-0:0.5.1-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat puppet-foreman_scap_client-0:0.3.16-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat puppetlabs-stdlib-0:4.2.1-1.20140510git08b00d9.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat puppetserver-0:5.3.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-amqp-0:2.2.2-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-anyjson-0:0.3.3-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-billiard-1:3.5.0.3-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-blinker-0:1.3-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-celery-0:4.0.2-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-crane-0:3.1.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-django-0:1.11.11-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-flask-1:0.10.1-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-fpconst-0:0.7.3-12.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-gnupg-0:0.3.7-1.el7ui *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-isodate-0:0.5.0-5.pulp.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-itsdangerous-0:0.23-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-jinja2-0:2.7.2-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-kid-0:0.9.6-11.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-kombu-1:4.0.2-8.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-mongoengine-0:0.10.5-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-nectar-0:1.5.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-oauth2-0:1.5.211-8.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-okaara-0:1.0.32-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-pymongo-0:3.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-qpid-0:1.35.0-5.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-semantic_version-0:2.2.0-6.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-simplejson-0:3.2.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-twisted-core-0:12.2.0-4.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-twisted-web-0:12.1.0-5.el7_2 *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-vine-0:1.1.3-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-werkzeug-0:0.9.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat python-zope-interface-0:4.0.5-4.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat qpid-cpp-0:1.36.0-19.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat qpid-dispatch-0:0.8.0-19.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat qpid-proton-0:0.16.0-12.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat redhat-access-insights-puppet-0:0.0.9-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat repoview-0:0.6.6-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-ansi-0:1.4.3-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-bundler_ext-0:0.4.1-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-clamp-0:1.1.2-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-concurrent-ruby-1:1.0.3-6.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-facter-0:2.4.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-fast_gettext-0:1.1.0-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-ffi-0:1.4.0-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-foreman_scap_client-0:0.3.0-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-gssapi-0:1.1.2-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-hashie-0:2.0.5-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-highline-0:1.7.8-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-kafo-0:2.1.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-kafo_parsers-0:0.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-kafo_wizards-0:0.0.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-little-plugger-0:1.1.3-22.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-logging-0:2.2.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-mime-types-0:1.19-7.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-multi_json-0:1.12.2-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-netrc-0:0.7.7-9.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-newt-0:0.9.6-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-oauth-0:0.5.4-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-openscap-0:0.4.7-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-passenger-0:4.0.18-24.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-powerbar-0:1.0.17-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-rack-1:1.6.4-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-rack-protection-0:1.5.3-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-rake-0:0.9.2.2-41.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-rb-inotify-0:0.9.7-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-rest-client-0:1.6.7-7.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-rkerberos-0:0.1.3-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-rsec-0:0.4.2-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-rubyipmi-0:0.10.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-sinatra-1:1.4.7-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-smart_proxy_ansible-0:2.0.2-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-smart_proxy_dhcp_remote_isc-0:0.0.4-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-smart_proxy_discovery-0:1.0.4-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-smart_proxy_discovery_image-0:1.0.9-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-smart_proxy_dynflow-0:0.2.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-smart_proxy_openscap-0:0.6.11-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-smart_proxy_pulp-0:1.3.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-smart_proxy_remote_execution_ssh-0:0.2.0-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat rubygem-tilt-0:1.3.7-2.git.0.3b416c9.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat saslwrapper-0:0.22-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat satellite-0:6.4.0-15.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat satellite-installer-0:6.4.0.7-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat SOAPpy-0:0.11.6-17.el7 *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-0:4.0-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-0:1.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-actioncable-0:5.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-actionmailer-0:5.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-actionpack-0:5.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-actionview-0:5.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-activejob-0:5.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-activemodel-0:5.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-activerecord-0:5.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-activesupport-0:5.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-arel-0:8.0.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-builder-0:3.2.3-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-coffee-rails-0:4.2.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-coffee-script-0:2.4.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-coffee-script-source-0:1.12.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-concurrent-ruby-0:1.0.5-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-crass-0:1.0.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-erubi-0:1.7.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-execjs-0:2.7.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-globalid-0:0.4.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-i18n-0:0.9.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-loofah-0:2.1.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-mail-0:2.7.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-method_source-0:0.9.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-mime-types-0:3.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-mime-types-data-0:3.2016.0521-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-mini_mime-0:1.0.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-multi_json-0:1.12.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-mustermann-0:1.0.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-nio4r-0:2.1.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-nokogiri-0:1.8.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-rack-0:2.0.3-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-rack-protection-0:2.0.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-rack-test-0:0.7.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-rails-0:5.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-rails-dom-testing-0:2.0.3-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-rails-html-sanitizer-0:1.0.3-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-railties-0:5.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-sinatra-0:2.0.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-sprockets-0:3.7.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-sprockets-rails-0:3.2.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-sqlite3-0:1.3.13-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-thor-0:0.20.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-thread_safe-0:0.3.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-tilt-0:2.0.8-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-turbolinks-0:2.5.4-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-tzinfo-0:1.2.4-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-websocket-driver-0:0.6.5-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-ror51-rubygem-websocket-extensions-0:0.1.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-activerecord-session_store-0:1.1.0-6.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-addressable-0:2.3.6-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-algebrick-0:0.7.3-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-ancestry-0:3.0.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-anemone-0:0.7.2-19.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-angular-rails-templates-1:1.0.2-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-apipie-bindings-0:0.2.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-apipie-params-0:0.0.5-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-apipie-rails-0:0.5.7-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-audited-0:4.7.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-autoparse-0:0.3.3-9.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-awesome_print-0:1.8.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-bastion-0:6.1.11-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-bundler_ext-0:0.4.1-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-clamp-0:1.1.2-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-concurrent-ruby-edge-1:0.2.4-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-css_parser-0:1.4.7-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-daemons-0:1.2.3-6.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-deacon-0:1.0.0-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-deep_cloneable-0:2.2.2-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-deface-0:1.2.0-10.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-diffy-0:3.0.1-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-docker-api-0:1.28.0-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-domain_name-0:0.5.20160310-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-dynflow-0:1.0.5.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-excon-0:0.58.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-extlib-0:0.9.16-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-facter-0:2.4.0-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-faraday-0:0.9.1-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fast_gettext-0:1.4.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-ffi-0:1.4.0-11.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-0:1.42.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-aws-0:1.3.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-core-0:1.45.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-digitalocean-0:0.3.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-google-0:0.1.0-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-json-0:1.0.2-9.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-libvirt-0:0.4.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-openstack-0:0.1.25-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-ovirt-0:1.1.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-rackspace-0:0.1.4-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-vsphere-0:2.3.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-xenserver-0:0.2.3-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-fog-xml-0:0.1.2-6.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_ansible-0:2.2.9-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_ansible_core-0:2.1.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_bootdisk-0:12.0.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_discovery-0:12.0.2.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_docker-0:4.1.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_hooks-0:0.3.14.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_openscap-0:0.10.3-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman-redhat_access-0:2.0.13-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_remote_execution-0:1.5.6-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_remote_execution_core-0:1.1.3-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman-tasks-0:0.13.4.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman-tasks-core-0:0.2.5-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_templates-0:6.0.3-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_theme_satellite-0:2.0.1.11-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-foreman_virt_who_configure-0:0.2.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-formatador-0:0.2.1-10.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-friendly_id-0:5.1.0-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-get_process_mem-0:0.2.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-gettext_i18n_rails-0:1.2.1-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-git-0:1.2.5-8.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-google-api-client-0:0.8.2-10.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-gssapi-0:1.2.0-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli-0:0.13.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_csv-0:2.3.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman-0:0.13.2.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman_admin-0:0.0.8-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman_ansible-0:0.1.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman_bootdisk-0:0.1.3.3-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman_discovery-0:1.0.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman_docker-0:0.0.6-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman_openscap-0:0.1.6-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman_remote_execution-0:0.1.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman_tasks-0:0.0.12-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman_templates-0:0.1.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_foreman_virt_who_configure-0:0.0.3-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hammer_cli_katello-0:0.13.4.3-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-hashie-0:2.0.5-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-highline-0:1.7.8-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-http-cookie-0:1.0.2-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-ipaddress-0:0.8.0-10.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-jgrep-0:1.3.3-11.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-journald-logger-0:2.0.3-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-journald-native-0:1.0.10-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-jwt-0:1.2.0-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-katello-0:3.7.0.41-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-launchy-0:2.4.3-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-ldap_fluff-0:0.4.7-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-little-plugger-0:1.1.3-22.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-locale-0:2.0.9-12.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-logging-0:2.2.2-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-logging-journald-0:1.0.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-multipart-post-0:1.2.0-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-net-ldap-0:0.15.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-net-ping-0:2.0.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-netrc-0:0.11.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-net-scp-0:1.2.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-net-ssh-0:4.0.1-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-net-ssh-krb-0:0.4.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-oauth-0:0.5.4-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-ovirt-engine-sdk-0:4.2.3-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-ovirt_provision_plugin-0:1.0.2-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-parse-cron-0:0.1.4-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-passenger-0:4.0.18-24.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-pg-0:0.21.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-polyglot-0:0.3.5-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-powerbar-0:1.0.17-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-prometheus-client-0:0.7.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-qpid_messaging-0:1.36.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-quantile-0:0.2.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-rabl-0:0.13.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-rack-jsonp-0:1.3.1-6.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-rails-i18n-0:5.0.4-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-rainbow-0:2.2.1-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-rbovirt-0:0.1.7-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-rbvmomi-0:1.10.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-record_tag_helper-0:1.0.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-redhat_access-0:2.1.6-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-redhat_access_lib-0:1.1.4-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-responders-0:2.4.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-rest-client-0:2.0.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-retriable-0:1.4.1-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-roadie-0:3.2.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-roadie-rails-0:1.2.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-robotex-0:1.0.0-20.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-ruby2ruby-0:2.4.0-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-ruby-libvirt-0:0.7.0-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-ruby_parser-0:3.10.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-runcible-0:2.8.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-safemode-0:1.3.5-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-scoped_search-0:4.1.3-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-secure_headers-0:5.0.5-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-sequel-0:5.7.1-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-sexp_processor-0:4.10.0-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-signet-0:0.6.0-9.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-smart_proxy_dynflow_core-0:0.2.1-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-sshkey-0:1.9.0-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-statsd-instrument-0:2.1.4-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-trollop-0:2.1.2-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-unf-0:0.1.3-6.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-unf_ext-0:0.0.6-8.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-unicode-0:0.4.4.1-5.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-unicode-display_width-0:1.0.5-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-useragent-0:0.16.8-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-validates_lengths_from_database-0:0.5.0-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-webpack-rails-0:0.9.8-4.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-wicked-0:1.3.2-1.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-will_paginate-0:3.1.5-2.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat tfm-rubygem-x-editable-rails-0:1.5.5-3.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat v8-1:3.14.5.10-19.el7sat *
Red Hat Satellite 6.4 for RHEL 7 RedHat yaml-cpp-0:0.5.1-7.el7sat *
Puppet Ubuntu artful *
Puppet Ubuntu esm-apps/xenial *
Puppet Ubuntu trusty *
Puppet Ubuntu xenial *

Potential Mitigations

References