CVE-2021-4142

mediumPriorität · verfolgen · 22EPSS 0.002 · 7. PerzentilEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.18% (7th) EPSS
CVSS 5.5 · medium
Is it mine?
55 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · nvd · redhat_csaf

EPSS · bewertet 2026-10-28

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobencandlepin-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:0790
  • Behobencandlepin-0:4.0.15-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:0790
  • Behobencandlepin-selinux-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:0790
  • Workaroundcandlepin-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundcandlepin-0:4.0.15-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundcandlepin-selinux-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-cli-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-ec2-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-gce-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-journald-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-libvirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-openstack-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-ovirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-postgresql-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-service-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-telemetry-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-vmware-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython-pulp-container-0:2.8.4-0.1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython-pulp-container-0:2.8.4-0.1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython-pulp-rpm-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython-pulp-rpm-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython-pulpcore-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython-pulpcore-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython3-pulp-container-0:2.8.4-0.1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython3-pulp-container-0:2.8.4-0.1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython3-pulp-rpm-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython3-pulp-rpm-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython3-pulpcore-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpython3-pulpcore-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-0:6.10.3-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-0:6.10.3-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-capsule-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-cli-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-common-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-common-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-katello-0:4.1.1.48-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf

    Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 3.6
v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · Red Hat Product Security US
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

04

betroffene Produkte (55)

Betroffene Produkte und Versionsbereiche.

20 von 55 angezeigt
05

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2022:0790Red Hat Security Advisory: Satellite 6.10.3 Async Bug Fix Update2022-03-08csaf · redhat_csafUS

    Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite.

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

veröffentlicht 2022-08-24geändert 2026-06-17
08

Referenzen (24)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan