medium5.4
CVE-2017-7513
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields.
Impact
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Satellite | Versions 5.0, 5.1.1, 5.2, 5.3, 5.4, 5.4.1 |