Katello
by Red Hat
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2013-0283 | Med | 0.35 | 5.4 | 0.01 | Dec 5, 2019 | Katello: Username in Notification page has cross site scripting | ||
| CVE-2013-2101 | Med | 0.35 | 5.4 | 0.01 | Dec 3, 2019 | Katello has multiple XSS issues in various entities | ||
| CVE-2014-3712 | 0.00 | — | 0.02 | Nov 3, 2014 | Katello allows remote attackers to cause a denial of service (memory consumption) via the (1) mode parameter in the setup_utils function in content_search_controller.rb or (2) action parameter in the respond function in api/api_controller.rb in app/controllers/katello/, which is… | |||
| CVE-2012-6116 | 0.00 | — | 0.00 | Mar 1, 2013 | modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file. |
- risk 0.35cvss 5.4epss 0.01
Katello: Username in Notification page has cross site scripting
- risk 0.35cvss 5.4epss 0.01
Katello has multiple XSS issues in various entities
- CVE-2014-3712Nov 3, 2014risk 0.00cvss —epss 0.02
Katello allows remote attackers to cause a denial of service (memory consumption) via the (1) mode parameter in the setup_utils function in content_search_controller.rb or (2) action parameter in the respond function in api/api_controller.rb in app/controllers/katello/, which is…
- CVE-2012-6116Mar 1, 2013risk 0.00cvss —epss 0.00
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.