Improper Access Control

2019-05-1603:48:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

12.6%

JSON

Red Hat Satellite is vulnerable to improper access control vulnerability. The vulnerability exists in the message queues maintained by Satellite’s QPID broker and used by katello-agent. A malicious user with authentication to a host registered to Satellite could execute privilege commands to access QMF methods to any host registered to Satellite.

CPENameOperatorVersion
python-hashlibeq20081119__6.el5sat
python-hashlibeq20081119__5.el5
python-hashlibeq20081119__5.el5sat
python-hashlibeq20081119__6.el5
rubygemseq1.3.7__4.el6_4
rubygemseq1.3.7__1.el6
openscapeq0.6.0__1.el6
openscapeq0.9.12__1.el6
openscapeq0.7.1__1.el6
openscapeq1.0.8__1.el6_5.1

Name	Operator	Version
python-hashlib	eq	20081119__6.el5sat
python-hashlib	eq	20081119__5.el5
python-hashlib	eq	20081119__5.el5sat
python-hashlib	eq	20081119__6.el5
rubygems	eq	1.3.7__4.el6_4
rubygems	eq	1.3.7__1.el6
openscap	eq	0.6.0__1.el6
openscap	eq	0.9.12__1.el6
openscap	eq	0.7.1__1.el6
openscap	eq	1.0.8__1.el6_5.1