Red Hat Satellite Capsule vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Red Hat Satellite Capsule: 2 record(s), with affected versions and fixes.
cpe:2.3:a:redhat:satellite_capsule

CVE-2025-9572 Medium · 6.5 CWE-863 Feb 27, 2026

Foreman: satellite: graphql api permission bypass leads to information disclosure

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

CVE-2017-15095 Critical · 9.8 CWE-502 Feb 6, 2018

Deserialization of Untrusted Data in Fasterxml Jackson-databind

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.