Action not permitted
Modal body text goes here.
cve-2021-4142
Vulnerability from cvelistv5
Published
2022-08-24 15:09
Modified
2024-08-03 17:16
Severity ?
EPSS score ?
Summary
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| secalert@redhat.com | https://access.redhat.com/security/cve/CVE-2021-4142 | Vendor Advisory | |
| secalert@redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=2034346 | Issue Tracking, Vendor Advisory | |
| secalert@redhat.com | https://github.com/candlepin/candlepin/pull/3197 | Patch, Third Party Advisory | |
| secalert@redhat.com | https://github.com/candlepin/candlepin/pull/3198 | Third Party Advisory | |
| secalert@redhat.com | https://github.com/candlepin/candlepin/pull/3199 | Patch, Third Party Advisory |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:16:04.280Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034346"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://access.redhat.com/security/cve/CVE-2021-4142"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/candlepin/candlepin/pull/3199"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/candlepin/candlepin/pull/3197"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/candlepin/candlepin/pull/3198"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "candlepin",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Affects v3.1.28-2, v3.2.21-1, v4.1.8-1 and earlier are affected."
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639 - Authorization Bypass Through User-Controlled Key -\u003e CWE-287 - Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-08-24T15:09:56",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034346"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://access.redhat.com/security/cve/CVE-2021-4142"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/candlepin/candlepin/pull/3199"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/candlepin/candlepin/pull/3197"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/candlepin/candlepin/pull/3198"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2021-4142",
"datePublished": "2022-08-24T15:09:56",
"dateReserved": "2021-12-20T00:00:00",
"dateUpdated": "2024-08-03T17:16:04.280Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2021-4142\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2022-08-24T16:15:09.547\",\"lastModified\":\"2023-11-07T03:40:15.473\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.\"},{\"lang\":\"es\",\"value\":\"El componente Candlepin de Red Hat Satellite estaba afectado por un fallo de autenticaci\u00f3n inapropiado. Algunos factores pod\u00edan permitir a un atacante usar el certificado SCA (Simple Content Access) para la autenticaci\u00f3n con Candlepin.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-639\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"},{\"lang\":\"en\",\"value\":\"CWE-639\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:candlepinproject:candlepin:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.1.0\",\"versionEndIncluding\":\"3.1.28-2\",\"matchCriteriaId\":\"3F8E66F2-C51A-413B-A621-33CA21EDA81F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:candlepinproject:candlepin:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.2.0\",\"versionEndIncluding\":\"3.2.21-1\",\"matchCriteriaId\":\"236D3F17-234D-41D9-A67D-0E919D60CE24\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:candlepinproject:candlepin:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.1.0\",\"versionEndIncluding\":\"4.1.8-1\",\"matchCriteriaId\":\"2822E169-A7B8-4EDA-B913-AF98CFC1BCCF\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/security/cve/CVE-2021-4142\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2034346\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://github.com/candlepin/candlepin/pull/3197\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/candlepin/candlepin/pull/3198\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/candlepin/candlepin/pull/3199\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}"
}
}
rhsa-2022_0790
Vulnerability from csaf_redhat
Published
2022-03-08 21:28
Modified
2024-11-06 00:32
Summary
Red Hat Security Advisory: Satellite 6.10.3 Async Bug Fix Update
Notes
Topic
Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite.
Details
Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.
Security Fix(es):
2043714 - CVE-2021-4142 candlepin: Satellite: Allow unintended SCA certificate to authenticate Candlepin [rhn_satellite_6-default]
This update fixes the following bugs:
2043702 - Unable to sync EPEL repositories on Satellite 6.10 when 'Mirror on Sync' is enabled
2043710 - Syncing tens of repos to capsule can cause deadlock: while updating tuple (...) in relation "core_content"
2048306 - Satellite 6.10 may fail to sync content to capsule still in version 6.9
2049760 - No longer be able to import content into disconnected Satellite for existing content views
2053723 - Large repo sync failed with "Katello::Errors::Pulp3Error: Response payload is not completed"
2053726 - After upgrading to 6.10, Satellite fails to sync some repositories with large files with timeout error
2055660 - organization context fails to change in web UI
2055662 - Incremental CV update fails with 400 HTTP error
2027367 - Satellite doesn't forward the "If-Modified-Since" header for /accessible_content endpoint to Candlepin
2027786 - Satellite schedules one recurring InventorySync::Async::InventoryScheduledSync per org but each task syncs all orgs, resulting in harmless but unnecessary tasks
2043697 - null value in column "manifest_id" violates not-null constraint error while syncing RHOSP container images
2043698 - Remote Execution fails to honor remote_execution_connect_by_ip override on host
2043699 - Content view export failed with undefined method `first' for nil:NilClass
2043700 - webhook event "build_exited" never gets triggered
2043701 - Ansible roles are not starting automatically after provisioning
2043704 - Syncing sha-checksummed KS repository fails with: " Artifact() got an unexpected keyword argument 'sha' "
2043705 - db:seed can fail when there are host mismatches
2043706 - New OS created due to facts mismatch for operatingsystem for RHSM, Puppet and Ansible
2043707 - Satellite upgrade to 6.10.1 fails with multiple rubygem-sinatra package dependency errors
2043712 - pulpcore-workers grow very large when repositories have many changelog entries
2043715 - Limited CV docker tags cannot be pulled after syncing library repo with "limit sync tags"
2043716 - 406 error appears when running insights-client --compliance
2043719 - Incremental publish content view doesn't copy any contents
2043720 - ERROR: at least one Erratum record has migrated_pulp3_href NULL value
2047345 - New version of Candlepin now has org in entitlement certificate and causes authorization issues
Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.\n\nSecurity Fix(es):\n2043714 - CVE-2021-4142 candlepin: Satellite: Allow unintended SCA certificate to authenticate Candlepin [rhn_satellite_6-default]\n\nThis update fixes the following bugs:\n\n2043702 - Unable to sync EPEL repositories on Satellite 6.10 when \u0027Mirror on Sync\u0027 is enabled\n2043710 - Syncing tens of repos to capsule can cause deadlock: while updating tuple (...) in relation \"core_content\"\n2048306 - Satellite 6.10 may fail to sync content to capsule still in version 6.9\n2049760 - No longer be able to import content into disconnected Satellite for existing content views \n2053723 - Large repo sync failed with \"Katello::Errors::Pulp3Error: Response payload is not completed\"\n2053726 - After upgrading to 6.10, Satellite fails to sync some repositories with large files with timeout error \n2055660 - organization context fails to change in web UI\n2055662 - Incremental CV update fails with 400 HTTP error \n2027367 - Satellite doesn\u0027t forward the \"If-Modified-Since\" header for /accessible_content endpoint to Candlepin\n2027786 - Satellite schedules one recurring InventorySync::Async::InventoryScheduledSync per org but each task syncs all orgs, resulting in harmless but unnecessary tasks \n2043697 - null value in column \"manifest_id\" violates not-null constraint error while syncing RHOSP container images\n2043698 - Remote Execution fails to honor remote_execution_connect_by_ip override on host\n2043699 - Content view export failed with undefined method `first\u0027 for nil:NilClass\n2043700 - webhook event \"build_exited\" never gets triggered\n2043701 - Ansible roles are not starting automatically after provisioning\n2043704 - Syncing sha-checksummed KS repository fails with: \" Artifact() got an unexpected keyword argument \u0027sha\u0027 \"\n2043705 - db:seed can fail when there are host mismatches\n2043706 - New OS created due to facts mismatch for operatingsystem for RHSM, Puppet and Ansible\n2043707 - Satellite upgrade to 6.10.1 fails with multiple rubygem-sinatra package dependency errors\n2043712 - pulpcore-workers grow very large when repositories have many changelog entries\n2043715 - Limited CV docker tags cannot be pulled after syncing library repo with \"limit sync tags\" \n2043716 - 406 error appears when running insights-client --compliance\n2043719 - Incremental publish content view doesn\u0027t copy any contents\n2043720 - ERROR: at least one Erratum record has migrated_pulp3_href NULL value \n2047345 - New version of Candlepin now has org in entitlement certificate and causes authorization issues\n\nUsers of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2022:0790",
"url": "https://access.redhat.com/errata/RHSA-2022:0790"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "2027367",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2027367"
},
{
"category": "external",
"summary": "2027786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2027786"
},
{
"category": "external",
"summary": "2034346",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034346"
},
{
"category": "external",
"summary": "2043697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043697"
},
{
"category": "external",
"summary": "2043698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043698"
},
{
"category": "external",
"summary": "2043699",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043699"
},
{
"category": "external",
"summary": "2043700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043700"
},
{
"category": "external",
"summary": "2043701",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043701"
},
{
"category": "external",
"summary": "2043702",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043702"
},
{
"category": "external",
"summary": "2043704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043704"
},
{
"category": "external",
"summary": "2043705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043705"
},
{
"category": "external",
"summary": "2043706",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043706"
},
{
"category": "external",
"summary": "2043707",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043707"
},
{
"category": "external",
"summary": "2043710",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043710"
},
{
"category": "external",
"summary": "2043712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043712"
},
{
"category": "external",
"summary": "2043715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043715"
},
{
"category": "external",
"summary": "2043716",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043716"
},
{
"category": "external",
"summary": "2043719",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043719"
},
{
"category": "external",
"summary": "2043720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043720"
},
{
"category": "external",
"summary": "2047345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2047345"
},
{
"category": "external",
"summary": "2048306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2048306"
},
{
"category": "external",
"summary": "2049760",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2049760"
},
{
"category": "external",
"summary": "2053723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053723"
},
{
"category": "external",
"summary": "2053726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053726"
},
{
"category": "external",
"summary": "2055660",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2055660"
},
{
"category": "external",
"summary": "2055662",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2055662"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0790.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.10.3 Async Bug Fix Update",
"tracking": {
"current_release_date": "2024-11-06T00:32:32+00:00",
"generator": {
"date": "2024-11-06T00:32:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2022:0790",
"initial_release_date": "2022-03-08T21:28:24+00:00",
"revision_history": [
{
"date": "2022-03-08T21:28:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2022-03-08T21:28:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-06T00:32:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.10",
"product": {
"name": "Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.10::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite Capsule 6.10",
"product": {
"name": "Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.10::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "candlepin-0:4.0.15-1.el7sat.src",
"product": {
"name": "candlepin-0:4.0.15-1.el7sat.src",
"product_id": "candlepin-0:4.0.15-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin@4.0.15-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"product": {
"name": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"product_id": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-aiohttp-xmlrpc@1.3.2-0.1.el7pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulp-container-0:2.8.4-0.1.el7pc.src",
"product": {
"name": "python-pulp-container-0:2.8.4-0.1.el7pc.src",
"product_id": "python-pulp-container-0:2.8.4-0.1.el7pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-container@2.8.4-0.1.el7pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulp-rpm-0:3.14.12-1.el7pc.src",
"product": {
"name": "python-pulp-rpm-0:3.14.12-1.el7pc.src",
"product_id": "python-pulp-rpm-0:3.14.12-1.el7pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-rpm@3.14.12-1.el7pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.10.3-1.el7sat.src",
"product": {
"name": "satellite-0:6.10.3-1.el7sat.src",
"product_id": "satellite-0:6.10.3-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.10.3-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src",
"product": {
"name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src",
"product_id": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman_ansible@6.3.4.1-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src",
"product": {
"name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src",
"product_id": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman_rh_cloud@4.0.31-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-0:2.5.2.19-1.el7sat.src",
"product": {
"name": "foreman-0:2.5.2.19-1.el7sat.src",
"product_id": "foreman-0:2.5.2.19-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@2.5.2.19-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulpcore-0:3.14.12-1.el7pc.src",
"product": {
"name": "python-pulpcore-0:3.14.12-1.el7pc.src",
"product_id": "python-pulpcore-0:3.14.12-1.el7pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulpcore@3.14.12-1.el7pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src",
"product": {
"name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src",
"product_id": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-katello@4.1.1.48-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src",
"product": {
"name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src",
"product_id": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-pulp_rpm_client@3.14.12.1-1.el7sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "candlepin-0:4.0.15-1.el7sat.noarch",
"product": {
"name": "candlepin-0:4.0.15-1.el7sat.noarch",
"product_id": "candlepin-0:4.0.15-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin@4.0.15-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "candlepin-selinux-0:4.0.15-1.el7sat.noarch",
"product": {
"name": "candlepin-selinux-0:4.0.15-1.el7sat.noarch",
"product_id": "candlepin-selinux-0:4.0.15-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin-selinux@4.0.15-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"product": {
"name": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"product_id": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-aiohttp-xmlrpc@1.3.2-0.1.el7pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"product": {
"name": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"product_id": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pulp-container@2.8.4-0.1.el7pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"product": {
"name": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"product_id": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pulp-rpm@3.14.12-1.el7pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.10.3-1.el7sat.noarch",
"product": {
"name": "satellite-capsule-0:6.10.3-1.el7sat.noarch",
"product_id": "satellite-capsule-0:6.10.3-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.10.3-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.10.3-1.el7sat.noarch",
"product": {
"name": "satellite-common-0:6.10.3-1.el7sat.noarch",
"product_id": "satellite-common-0:6.10.3-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.10.3-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.10.3-1.el7sat.noarch",
"product": {
"name": "satellite-0:6.10.3-1.el7sat.noarch",
"product_id": "satellite-0:6.10.3-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.10.3-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.10.3-1.el7sat.noarch",
"product": {
"name": "satellite-cli-0:6.10.3-1.el7sat.noarch",
"product_id": "satellite-cli-0:6.10.3-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.10.3-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch",
"product_id": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman_ansible@6.3.4.1-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch",
"product_id": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman_rh_cloud@4.0.31-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-gce@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ovirt@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-service-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-service-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"product": {
"name": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"product_id": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@2.5.2.19-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"product": {
"name": "python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"product_id": "python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pulpcore@3.14.12-1.el7pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch",
"product_id": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-katello@4.1.1.48-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch",
"product_id": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-pulp_rpm_client@3.14.12.1-1.el7sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.src"
},
"product_reference": "foreman-0:2.5.2.19-1.el7sat.src",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-cli-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-debug-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-gce-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-gce-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-journald-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-service-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-service-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src"
},
"product_reference": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-container-0:2.8.4-0.1.el7pc.src as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:python-pulp-container-0:2.8.4-0.1.el7pc.src"
},
"product_reference": "python-pulp-container-0:2.8.4-0.1.el7pc.src",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-rpm-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:python-pulp-rpm-0:3.14.12-1.el7pc.src"
},
"product_reference": "python-pulp-rpm-0:3.14.12-1.el7pc.src",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulpcore-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:python-pulpcore-0:3.14.12-1.el7pc.src"
},
"product_reference": "python-pulpcore-0:3.14.12-1.el7pc.src",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch"
},
"product_reference": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch"
},
"product_reference": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch"
},
"product_reference": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pulpcore-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:python3-pulpcore-0:3.14.12-1.el7pc.noarch"
},
"product_reference": "python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:satellite-0:6.10.3-1.el7sat.noarch"
},
"product_reference": "satellite-0:6.10.3-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.10.3-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:satellite-0:6.10.3-1.el7sat.src"
},
"product_reference": "satellite-0:6.10.3-1.el7sat.src",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:satellite-capsule-0:6.10.3-1.el7sat.noarch"
},
"product_reference": "satellite-capsule-0:6.10.3-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:satellite-cli-0:6.10.3-1.el7sat.noarch"
},
"product_reference": "satellite-cli-0:6.10.3-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10",
"product_id": "7Server-Capsule610:satellite-common-0:6.10.3-1.el7sat.noarch"
},
"product_reference": "satellite-common-0:6.10.3-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.noarch"
},
"product_reference": "candlepin-0:4.0.15-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-0:4.0.15-1.el7sat.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.src"
},
"product_reference": "candlepin-0:4.0.15-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-selinux-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:candlepin-selinux-0:4.0.15-1.el7sat.noarch"
},
"product_reference": "candlepin-selinux-0:4.0.15-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.src"
},
"product_reference": "foreman-0:2.5.2.19-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-cli-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-debug-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-gce-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-gce-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-journald-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-service-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-service-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch"
},
"product_reference": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src"
},
"product_reference": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-container-0:2.8.4-0.1.el7pc.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:python-pulp-container-0:2.8.4-0.1.el7pc.src"
},
"product_reference": "python-pulp-container-0:2.8.4-0.1.el7pc.src",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-rpm-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:python-pulp-rpm-0:3.14.12-1.el7pc.src"
},
"product_reference": "python-pulp-rpm-0:3.14.12-1.el7pc.src",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulpcore-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:python-pulpcore-0:3.14.12-1.el7pc.src"
},
"product_reference": "python-pulpcore-0:3.14.12-1.el7pc.src",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch"
},
"product_reference": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch"
},
"product_reference": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch"
},
"product_reference": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pulpcore-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:python3-pulpcore-0:3.14.12-1.el7pc.noarch"
},
"product_reference": "python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.noarch"
},
"product_reference": "satellite-0:6.10.3-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.10.3-1.el7sat.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.src"
},
"product_reference": "satellite-0:6.10.3-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:satellite-capsule-0:6.10.3-1.el7sat.noarch"
},
"product_reference": "satellite-capsule-0:6.10.3-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:satellite-cli-0:6.10.3-1.el7sat.noarch"
},
"product_reference": "satellite-cli-0:6.10.3-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:satellite-common-0:6.10.3-1.el7sat.noarch"
},
"product_reference": "satellite-common-0:6.10.3-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src"
},
"product_reference": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src"
},
"product_reference": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src"
},
"product_reference": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite610"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src as a component of Red Hat Satellite 6.10",
"product_id": "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src"
},
"product_reference": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite610"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Nikolaos Moumoulidis",
"Barnaby Court"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-4142",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2021-12-20T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.src",
"7Server-Capsule610:foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-service-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"7Server-Capsule610:python-pulp-container-0:2.8.4-0.1.el7pc.src",
"7Server-Capsule610:python-pulp-rpm-0:3.14.12-1.el7pc.src",
"7Server-Capsule610:python-pulpcore-0:3.14.12-1.el7pc.src",
"7Server-Capsule610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"7Server-Capsule610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"7Server-Capsule610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"7Server-Capsule610:python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"7Server-Capsule610:satellite-0:6.10.3-1.el7sat.noarch",
"7Server-Capsule610:satellite-0:6.10.3-1.el7sat.src",
"7Server-Capsule610:satellite-capsule-0:6.10.3-1.el7sat.noarch",
"7Server-Capsule610:satellite-cli-0:6.10.3-1.el7sat.noarch",
"7Server-Capsule610:satellite-common-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.src",
"7Server-Satellite610:foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-service-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"7Server-Satellite610:python-pulp-container-0:2.8.4-0.1.el7pc.src",
"7Server-Satellite610:python-pulp-rpm-0:3.14.12-1.el7pc.src",
"7Server-Satellite610:python-pulpcore-0:3.14.12-1.el7pc.src",
"7Server-Satellite610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"7Server-Satellite610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"7Server-Satellite610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"7Server-Satellite610:python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"7Server-Satellite610:satellite-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:satellite-0:6.10.3-1.el7sat.src",
"7Server-Satellite610:satellite-capsule-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:satellite-cli-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:satellite-common-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src",
"7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src",
"7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src",
"7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2034346"
}
],
"notes": [
{
"category": "description",
"text": "The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Satellite: Allow unintended SCA certificate to authenticate Candlepin",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.noarch",
"7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.src",
"7Server-Satellite610:candlepin-selinux-0:4.0.15-1.el7sat.noarch"
],
"known_not_affected": [
"7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.src",
"7Server-Capsule610:foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-service-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"7Server-Capsule610:python-pulp-container-0:2.8.4-0.1.el7pc.src",
"7Server-Capsule610:python-pulp-rpm-0:3.14.12-1.el7pc.src",
"7Server-Capsule610:python-pulpcore-0:3.14.12-1.el7pc.src",
"7Server-Capsule610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"7Server-Capsule610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"7Server-Capsule610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"7Server-Capsule610:python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"7Server-Capsule610:satellite-0:6.10.3-1.el7sat.noarch",
"7Server-Capsule610:satellite-0:6.10.3-1.el7sat.src",
"7Server-Capsule610:satellite-capsule-0:6.10.3-1.el7sat.noarch",
"7Server-Capsule610:satellite-cli-0:6.10.3-1.el7sat.noarch",
"7Server-Capsule610:satellite-common-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.src",
"7Server-Satellite610:foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-service-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"7Server-Satellite610:python-pulp-container-0:2.8.4-0.1.el7pc.src",
"7Server-Satellite610:python-pulp-rpm-0:3.14.12-1.el7pc.src",
"7Server-Satellite610:python-pulpcore-0:3.14.12-1.el7pc.src",
"7Server-Satellite610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"7Server-Satellite610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"7Server-Satellite610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"7Server-Satellite610:python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"7Server-Satellite610:satellite-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:satellite-0:6.10.3-1.el7sat.src",
"7Server-Satellite610:satellite-capsule-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:satellite-cli-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:satellite-common-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src",
"7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src",
"7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src",
"7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-4142"
},
{
"category": "external",
"summary": "RHBZ#2034346",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034346"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-4142",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-4142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4142"
}
],
"release_date": "2022-01-17T10:30:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-03-08T21:28:24+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.noarch",
"7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.src",
"7Server-Satellite610:candlepin-selinux-0:4.0.15-1.el7sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0790"
},
{
"category": "workaround",
"details": "Mitigation for this issue is not available because it doesn\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.src",
"7Server-Capsule610:foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-service-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"7Server-Capsule610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"7Server-Capsule610:python-pulp-container-0:2.8.4-0.1.el7pc.src",
"7Server-Capsule610:python-pulp-rpm-0:3.14.12-1.el7pc.src",
"7Server-Capsule610:python-pulpcore-0:3.14.12-1.el7pc.src",
"7Server-Capsule610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"7Server-Capsule610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"7Server-Capsule610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"7Server-Capsule610:python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"7Server-Capsule610:satellite-0:6.10.3-1.el7sat.noarch",
"7Server-Capsule610:satellite-0:6.10.3-1.el7sat.src",
"7Server-Capsule610:satellite-capsule-0:6.10.3-1.el7sat.noarch",
"7Server-Capsule610:satellite-cli-0:6.10.3-1.el7sat.noarch",
"7Server-Capsule610:satellite-common-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.noarch",
"7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.src",
"7Server-Satellite610:candlepin-selinux-0:4.0.15-1.el7sat.noarch",
"7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.src",
"7Server-Satellite610:foreman-cli-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-debug-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-gce-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-journald-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-service-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch",
"7Server-Satellite610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src",
"7Server-Satellite610:python-pulp-container-0:2.8.4-0.1.el7pc.src",
"7Server-Satellite610:python-pulp-rpm-0:3.14.12-1.el7pc.src",
"7Server-Satellite610:python-pulpcore-0:3.14.12-1.el7pc.src",
"7Server-Satellite610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch",
"7Server-Satellite610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch",
"7Server-Satellite610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch",
"7Server-Satellite610:python3-pulpcore-0:3.14.12-1.el7pc.noarch",
"7Server-Satellite610:satellite-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:satellite-0:6.10.3-1.el7sat.src",
"7Server-Satellite610:satellite-capsule-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:satellite-cli-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:satellite-common-0:6.10.3-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src",
"7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src",
"7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src",
"7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch",
"7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.noarch",
"7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.src",
"7Server-Satellite610:candlepin-selinux-0:4.0.15-1.el7sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Satellite: Allow unintended SCA certificate to authenticate Candlepin"
}
]
}
rhsa-2022_5498
Vulnerability from csaf_redhat
Published
2022-07-05 14:41
Modified
2024-11-03 19:39
Summary
Red Hat Security Advisory: Satellite 6.11 Release
Notes
Topic
An update is now available for Red Hat Satellite 6.11
Details
Red Hat Satellite is a systems management tool for Linux-based
infrastructure. It allows for provisioning, remote management, and
monitoring of multiple Linux deployments with a single centralized tool.
Security Fix(es):
* libsolv: Heap-based buffer overflow in testcase_read() in src/testcase.c (CVE-2021-3200)
* satellite: foreman: Authenticate remote code execution through Sendmail configuration (CVE-2021-3584)
* candlepin: Allow unintended SCA certificate to authenticate Candlepin (CVE-2021-4142)
* candlepin: netty: Information disclosure via the local system temporary directory (CVE-2021-21290)
* candlepin: netty: Possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)
* candlepin: netty: Request smuggling via content-length header (CVE-2021-21409)
* tfm-rubygem-sidekiq: XSS via the queue name of the live-poll feature (CVE-2021-30151)
* python-sqlparse: ReDoS via regular expression in StripComments filter (CVE-2021-32839)
* libsolv: various flaws (CVE-2021-33928 CVE-2021-33929 CVE-2021-33930 CVE-2021-33938)
* tfm-rubygem-puma: Inconsistent Interpretation of HTTP Requests in puma (CVE-2021-41136)
* logback-classic: Remote code execution through JNDI call from within its configuration file (CVE-2021-42550)
* candlepin: netty: Control chars in header names may lead to HTTP request smuggling (CVE-2021-43797)
* python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)
* python3-django: Potential bypass of an upstream access control based on URL paths (CVE-2021-44420)
* libsolv: Heap overflow (CVE-2021-44568)
* python3-django: Various flaws (CVE-2021-45115 CVE-2021-45116 CVE-2021-45452 CVE-2022-22818)
* tfm-rubygem-actionpack: Information leak between requests (CVE-2022-23633)
* tfm-rubygem-puma: rubygem-rails: Information leak between requests (CVE-2022-23634)
* python3-django: Denial-of-service possibility in file uploads (CVE-2022-23833)
* tfm-rubygem-sidekiq: WebUI Denial of Service caused by number of days on graph (CVE-2022-23837)
* python3-django: Various flaws (CVE-2022-28346 CVE-2022-28347)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Additional Changes:
* New repo layout for Satellite, Utils, Maintenance, and Client repos.
* Support for RHEL 9 clients
* Module-based installation on RHEL 8
* Upgrading Satellite Server and Capsule Server installations from RHEL 7 to RHEL 8
* Connected and Disconnected servers supported on RHEL 7 and RHEL 8
* Inter-Server Synchronization improvements
* Puppet integration optional and disabled by default
* Pulp 3 updated to Python 3.8
* Change to Capsule certificate archive
* New default port for communication with Red Hat Subscription Management * (RHSM) API on Capsule servers
* New Content Views Page (Content Publication workflow simplification)
* New Hosts Page (Technology Preview)
* Registration and preview templates
* Simplified host content source changing
* Improved behavior for configuring and running remote jobs
* Provisioning improvements
* New error signaling unsupported options in TASK-Filter
* Virt-who configuration enhanced to support Nutanix AHV
* Cloud Connector configuration updated
* Improved Insights adoption
The items above are not a complete list of changes. This update also fixes
several bugs and adds various enhancements. Documentation for these changes
is available from the Release Notes document linked to in the References
section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.