A lack of access control was found in the message queues maintained by Satellites QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1. A malicious user authenticated to a host registered to Satellite (or Capsule) can use this flaw to access QMF methods to any host also registered to Satellite (or Capsule) and execute privileged commands.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Satellite | Redhat | * | 6.2 (excluding) |
| Red Hat Enterprise Virtualization 3 | RedHat | gofer | * |
| Red Hat Enterprise Virtualization 3 | RedHat | katello-host-tools | * |
| Red Hat Enterprise Virtualization 3 | RedHat | pulp | * |
| Red Hat Enterprise Virtualization 3 | RedHat | pulp-rpm | * |
| Red Hat Enterprise Virtualization 3 | RedHat | python-isodate | * |
| Red Hat Enterprise Virtualization 3 | RedHat | qpid-proton | * |
| Red Hat Satellite 6 | RedHat | foreman | * |
| Red Hat Satellite 6 | RedHat | future | * |
| Red Hat Satellite 6 | RedHat | gofer | * |
| Red Hat Satellite 6 | RedHat | katello-host-tools | * |
| Red Hat Satellite 6 | RedHat | openscap | * |
| Red Hat Satellite 6 | RedHat | pulp | * |
| Red Hat Satellite 6 | RedHat | pulp-puppet | * |
| Red Hat Satellite 6 | RedHat | pulp-rpm | * |
| Red Hat Satellite 6 | RedHat | puppet-agent | * |
| Red Hat Satellite 6 | RedHat | python-argcomplete | * |
| Red Hat Satellite 6 | RedHat | python-beautifulsoup4 | * |
| Red Hat Satellite 6 | RedHat | python-hashlib | * |
| Red Hat Satellite 6 | RedHat | python-isodate | * |
| Red Hat Satellite 6 | RedHat | python-psutil | * |
| Red Hat Satellite 6 | RedHat | python-uuid | * |
| Red Hat Satellite 6 | RedHat | qpid-proton | * |
| Red Hat Satellite 6 | RedHat | rubygem-foreman_scap_client | * |
| Red Hat Satellite 6 | RedHat | rubygem-json | * |
| Red Hat Satellite 6 | RedHat | rubygems | * |
| Red Hat Satellite 6 | RedHat | satellite | * |
| Red Hat Satellite 6 | RedHat | tfm | * |
| Red Hat Satellite 6 | RedHat | tfm-ror52 | * |
| Red Hat Satellite 6 | RedHat | tfm-ror52-rubygem-mime-types | * |
| Red Hat Satellite 6 | RedHat | tfm-ror52-rubygem-mime-types-data | * |
| Red Hat Satellite 6 | RedHat | tfm-ror52-rubygem-multi_json | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-apipie-bindings | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-awesome_print | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-clamp | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-domain_name | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-fast_gettext | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_csv | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman_admin | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman_ansible | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman_bootdisk | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman_discovery | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman_docker | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman_openscap | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman_remote_execution | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman_tasks | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman_templates | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_foreman_virt_who_configure | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hammer_cli_katello | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-hashie | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-highline | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-http-cookie | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-little-plugger | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-locale | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-logging | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-netrc | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-oauth | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-powerbar | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-rest-client | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-unf | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-unf_ext | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-unicode | * |
| Red Hat Satellite 6 | RedHat | tfm-rubygem-unicode-display_width | * |
| Red Hat Satellite 6 | RedHat | tracer | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | katello-installer-base-0:3.0.0.105-1.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | libwebsockets-0:2.1.0-3.el6 | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | python-qpid-0:1.35.0-5.el6 | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | qpid-cpp-0:1.36.0-19.el6 | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | qpid-dispatch-0:0.8.0-10.el6 | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | qpid-proton-0:0.16.0-12.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | satellite-0:6.2.16.1-1.0.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | tfm-rubygem-foreman_theme_satellite-0:0.1.47.5-1.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | tfm-rubygem-katello-0:3.0.0.171-1.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | tfm-rubygem-qpid_messaging-0:1.36.0-6.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | katello-installer-base-0:3.0.0.105-1.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | libwebsockets-0:2.1.0-3.el6 | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | python-qpid-0:1.35.0-5.el6 | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | qpid-cpp-0:1.36.0-19.el6 | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | qpid-dispatch-0:0.8.0-10.el6 | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | qpid-proton-0:0.16.0-12.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | satellite-0:6.2.16.1-1.0.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | tfm-rubygem-foreman_theme_satellite-0:0.1.47.5-1.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | tfm-rubygem-katello-0:3.0.0.171-1.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 6 | RedHat | tfm-rubygem-qpid_messaging-0:1.36.0-6.el6sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | katello-installer-base-0:3.0.0.105-1.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | libwebsockets-0:2.1.0-3.el7 | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | python-qpid-0:1.35.0-5.el7 | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | qpid-cpp-0:1.36.0-19.el7 | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | qpid-dispatch-0:0.8.0-16.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | qpid-proton-0:0.16.0-12.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | satellite-0:6.2.16.1-1.0.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | tfm-rubygem-foreman_theme_satellite-0:0.1.47.5-1.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | tfm-rubygem-katello-0:3.0.0.171-1.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | tfm-rubygem-qpid_messaging-0:1.36.0-6.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | katello-installer-base-0:3.0.0.105-1.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | libwebsockets-0:2.1.0-3.el7 | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | python-qpid-0:1.35.0-5.el7 | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | qpid-cpp-0:1.36.0-19.el7 | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | qpid-dispatch-0:0.8.0-16.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | qpid-proton-0:0.16.0-12.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | satellite-0:6.2.16.1-1.0.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | tfm-rubygem-foreman_theme_satellite-0:0.1.47.5-1.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | tfm-rubygem-katello-0:3.0.0.171-1.el7sat | * |
| Red Hat Satellite 6.2 for RHEL 7 | RedHat | tfm-rubygem-qpid_messaging-0:1.36.0-6.el7sat | * |
| Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-installer-base-0:3.4.5.35-1.el7sat | * |
| Red Hat Satellite 6.3 for RHEL 7 | RedHat | satellite-0:6.3.5.1-1.el7sat | * |
| Red Hat Satellite 6.3 for RHEL 7 | RedHat | katello-installer-base-0:3.4.5.35-1.el7sat | * |
| Red Hat Satellite 6.3 for RHEL 7 | RedHat | satellite-0:6.3.5.1-1.el7sat | * |
| Red Hat Satellite 6.4 for RHEL 7 | RedHat | katello-installer-base-0:3.7.0.19-1.el7sat | * |
| Red Hat Satellite 6.4 for RHEL 7 | RedHat | katello-installer-base-0:3.7.0.19-1.el7sat | * |