CVE-2021-4142
mediumPriorität · verfolgen · 22EPSS 0.002 · 7. PerzentilEUUSEPSS · bewertet 2026-10-28
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- Behobencandlepin-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:0790 - Behobencandlepin-0:4.0.15-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:0790 - Behobencandlepin-selinux-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:0790 - Workaroundcandlepin-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundcandlepin-0:4.0.15-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundcandlepin-selinux-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-cli-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-ec2-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-gce-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-journald-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-libvirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-openstack-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-ovirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-postgresql-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-service-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-telemetry-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-vmware-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulp-container-0:2.8.4-0.1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulp-container-0:2.8.4-0.1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulp-rpm-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulp-rpm-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulpcore-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulpcore-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulp-container-0:2.8.4-0.1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulp-container-0:2.8.4-0.1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulp-rpm-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulp-rpm-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulpcore-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulpcore-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-0:6.10.3-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-0:6.10.3-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-capsule-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-cli-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-common-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-common-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-katello-0:4.1.1.48-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (55)
Betroffene Produkte und Versionsbereiche.
- foreman-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
- foreman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
- foreman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10alle Versionennot affectedredhat_csafUS
- foreman-cli-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
- foreman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
- foreman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10alle Versionennot affectedredhat_csafUS
- foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
- foreman-ec2-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
- foreman-gce-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
- foreman-journald-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
- foreman-libvirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
- foreman-openstack-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
- foreman-ovirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10alle Versionennot affectedredhat_csafUS
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2022:0790Red Hat Security Advisory: Satellite 6.10.3 Async Bug Fix Update2022-03-08csaf · redhat_csafUS
Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (24)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2022:0790cnnvd
- https://access.redhat.com/errata/RHSA-2022:5498cnnvd
- https://access.redhat.com/security/cve/CVE-2021-4142cnnvd
- https://access.redhat.com/security/cve/cve-2021-4142cnnvd
- https://bugzilla.redhat.com/show_bug.cgi?id=2034346cnnvd
- https://cxsecurity.com/cveshow/CVE-2021-4142/cnnvd
- https://github.com/candlepin/candlepin/pull/3197cnnvd
- https://github.com/candlepin/candlepin/pull/3198cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan