| Package | Affected versions | Patched versions |
|---|---|---|
| satellite | = 6.7 | |
| satellite capsule | = 6.7 | |
| foreman ansible | < 4.0.3.4 | 4.0.3.4 |
A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free