Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:4866
HistoryJun 01, 2022 - 1:30 p.m.

(RHSA-2022:4866) Important: Satellite Tools 6.10.5 Async Bug Fix Update

2022-06-0113:30:58
access.redhat.com
88
red hat satellite
system management
cve-2021-27023
cve-2021-27025
puppet agent

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

64.7%

JSON

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.

Bugs Fixed:
2023853 CVE-2021-27025 puppet: silent configuration failure in agent
2023859 CVE-2021-27023 puppet: unsafe HTTP redirect
2027254 CVE-2021-27025 CVE-2021-27023 CVE-2021-27025 puppet: multiple flaws in Satellite Tools [rhn_satellite_6.10]

Security Fix(es):

  • Puppet Agent: Unsafe HTTP redirect (CVE-2021-27023)
  • Puppet Agent: Silent configuration failure in agent (CVE-2021-27025)

Users of Red Hat Satellite Tools on all Red Hat Enterprise Linux versions are advised to upgrade to these updated packages.

Related

nessus 12
fedora 1
redhat 5
openvas 1
redhatcve 2
cnvd 1
veracode 2
debiancve 2
cvelist 2
nvd 2
prion 2
rubygems 2
cve 2
freebsd 2
osv 4
ubuntucve 2
github 2
nessus
nessus
RHEL 6 / 7 / 8 : Satellite Tools 6.10.5 Async Bug Fix Update (Important) (RHSA-2022:4866)
2022-06-02 00:00:00
RHEL 6 / 7 / 8 : Satellite Tools 6.9.9 Async Bug Fix Update (Important) (RHSA-2022:4867)
2022-06-01 00:00:00
RHEL 7 : Satellite 6.10.5 Async Bug Fix Update (Important) (RHSA-2022:1708)
2022-05-05 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: puppet-7.12.1-1.fc35
2021-11-28 00:45:39
redhat
redhat
(RHSA-2022:1708) Important: Satellite 6.10.5 Async Bug Fix Update
2022-05-04 12:54:25
(RHSA-2022:4867) Important: Satellite Tools 6.9.9 Async Bug Fix Update
2022-06-01 13:31:11
(RHSA-2022:1478) Important: Satellite 6.9.9 Async Bug Fix Update
2022-04-20 20:12:28
openvas
openvas
Fedora: Security Advisory for puppet (FEDORA-2021-1c0e788093)
2021-12-04 00:00:00
redhatcve
redhatcve
CVE-2021-27023
2021-11-16 18:08:17
CVE-2021-27025
2021-11-16 18:08:18
cnvd
cnvd
Puppet Server Information Disclosure Vulnerability
2021-11-13 00:00:00
veracode
veracode
Information Disclosure
2022-11-21 03:50:15
Denial Of Service (DoS)
2021-11-19 11:36:54
debiancve
debiancve
CVE-2021-27025
2021-11-18 15:15:09
CVE-2021-27023
2021-11-18 15:15:09
cvelist
cvelist
CVE-2021-27025
2021-11-18 14:30:36
CVE-2021-27023
2021-11-18 14:33:18
nvd
nvd
CVE-2021-27025
2021-11-18 15:15:09
CVE-2021-27023
2021-11-18 15:15:09
prion
prion
Design/Logic Flaw
2021-11-18 15:15:00
Heap overflow
2021-11-18 15:15:00
rubygems
rubygems
Silent Configuration Failure in Puppet Agent
2021-12-01 21:00:00
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-01 21:00:00
cve
cve
CVE-2021-27025
2021-11-18 15:15:09
CVE-2021-27023
2021-11-18 15:15:09
freebsd
freebsd
puppet -- Silent Configuration Failure
2021-11-09 00:00:00
puppet -- Unsafe HTTP Redirect
2021-11-09 00:00:00
osv
osv
Silent Configuration Failure in Puppet Agent
2021-12-02 17:54:25
CVE-2021-27025
2021-11-18 15:15:09
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-02 17:52:45
ubuntucve
ubuntucve
CVE-2021-27025
2021-11-18 00:00:00
CVE-2021-27023
2021-11-18 00:00:00
github
github
Silent Configuration Failure in Puppet Agent
2021-12-02 17:54:25
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-02 17:52:45

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

64.7%

JSON
Related for RHSA-2022:4866
nessus12fedora1redhat5openvas1redhatcve2cnvd1veracode2debiancve2cvelist2nvd2prion2rubygems2cve2freebsd2osv4ubuntucve2github2