CVE-2021-4142
mediumpriority · track · 22EPSS 0.002 · 7 %ileEUUSEPSS · scored 2026-10-28
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedcandlepin-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:0790 - Fixedcandlepin-0:4.0.15-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:0790 - Fixedcandlepin-selinux-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:0790 - Workaroundcandlepin-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundcandlepin-0:4.0.15-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundcandlepin-selinux-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-cli-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-ec2-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-gce-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-journald-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-libvirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-openstack-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-ovirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-postgresql-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-service-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-telemetry-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-vmware-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulp-container-0:2.8.4-0.1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulp-container-0:2.8.4-0.1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulp-rpm-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulp-rpm-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulpcore-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython-pulpcore-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulp-container-0:2.8.4-0.1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulp-container-0:2.8.4-0.1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulp-rpm-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulp-rpm-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulpcore-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpython3-pulpcore-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-0:6.10.3-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-0:6.10.3-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-capsule-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-cli-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-common-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-common-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-katello-0:4.1.1.48-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src as a component of Red Hat Satellite 6.10redhat_csaf
Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (55)
Products and version ranges known to be affected.
- foreman-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10all versionsnot affectedredhat_csafUS
- foreman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite 6.10all versionsnot affectedredhat_csafUS
- foreman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10all versionsnot affectedredhat_csafUS
- foreman-cli-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10all versionsnot affectedredhat_csafUS
- foreman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10all versionsnot affectedredhat_csafUS
- foreman-ec2-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10all versionsnot affectedredhat_csafUS
- foreman-gce-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10all versionsnot affectedredhat_csafUS
- foreman-libvirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10all versionsnot affectedredhat_csafUS
- foreman-ovirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10all versionsnot affectedredhat_csafUS
advisories (1)
Vendor and ecosystem advisories describing this.
- RHSA-2022:0790Red Hat Security Advisory: Satellite 6.10.3 Async Bug Fix Update2022-03-08csaf · redhat_csafUS
Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (24)
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2022:0790cnnvd
- https://access.redhat.com/errata/RHSA-2022:5498cnnvd
- https://access.redhat.com/security/cve/CVE-2021-4142cnnvd
- https://access.redhat.com/security/cve/cve-2021-4142cnnvd
- https://bugzilla.redhat.com/show_bug.cgi?id=2034346cnnvd
- https://cxsecurity.com/cveshow/CVE-2021-4142/cnnvd
- https://github.com/candlepin/candlepin/pull/3197cnnvd
- https://github.com/candlepin/candlepin/pull/3198cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan