medium6.5
CVE-2020-10716
A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view.
Impact
A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data. This flaw affects tfm-rubygem-foreman_ansible versions before 4.0.3.4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Satellite | Version 6.7 |
| Redhat | Satellite Capsule | Version 6.7 |
| Theforeman | Foreman Ansible | before 4.0.3.4 |