| Package | Affected versions | Patched versions |
|---|---|---|
| satellite | ≥ 6.0, ≤ 6.19 |
A flaw has been found in foreman when HTTP parameters are modified in http_proxies_controller and http_proxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free