Vulnerabilidades do Red Hat Satellite Capsule

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Red Hat Satellite Capsule: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:redhat:satellite_capsule

CVE-2025-9572 Média · 6.5 CWE-863 27/02/2026

Foreman: satellite: graphql api permission bypass leads to information disclosure

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

CVE-2017-15095 Crítica · 9.8 CWE-502 06/02/2018

Deserialization of Untrusted Data em Fasterxml Jackson-databind

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.