RHSA-2015:1591High

Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 7

Published
August 12, 2015
Last Modified
May 27, 2026

🔗 CVE IDs covered (8)

CVE-2015-3155 →CVE-2015-3235 →CVE-2009-3555 →CVE-2013-4346 →CVE-2013-4347 →CVE-2014-3653 →CVE-2015-1816 →CVE-2015-1844 →

📋 Description

CVE-2009-3555 — TLS: MITM attacks via session renegotiation CVE-2013-4346 — python-oauth2: _check_signature() ignores the nonce value when validating signed urls CVE-2013-4347 — python-oauth2: Uses poor PRNG in nonce CVE-2014-3653 — foreman: cross-site scripting (XSS) flaw in template preview screen CVE-2015-1816 — foreman: lack of SSL certificate validation when performing LDAPS authentication CVE-2015-1844 — foreman: API not scoping resources to taxonomies CVE-2015-3155 — foreman: the _session_id cookie is issued without the Secure flag CVE-2015-3235 — foreman: edit_users permission allows changing of admin passwords

🔗 References (12)