Redhat: >> Satellite >> 6.0 Security Vulnerabilities
The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote authenticated users with administrative access on a managed content host to execute arbitrary code via a crafted message, related to a pickle processing problem in pulp.
CVSS Score
7.2
EPSS Score
0.04
Published
2017-10-18
Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-08-28
MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service.
CVSS Score
5.5
EPSS Score
0.003
Published
2017-06-06
Page 5