Lucene search

RedhatCVELIST:CVE-2020-14335

HistoryJun 02, 2021 - 11:52 a.m.

CVE-2020-14335

2021-06-0211:52:56

CWE-200

redhat

www.cve.org

red hat satellite

smart-proxy

omapi secrets

isc dhcp

privileged attacker

system availability

AI Score

5.8

Confidence

High

EPSS

Percentile

12.6%

JSON

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "product": "Red Hat Satellite",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Red Hat Satellite 6.9"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1858302