Foreman Katello 4.1.0 Release Candidate 2

CPE Details

Foreman Katello 4.1.0 Release Candidate 2
theforeman
katello
4.1.0
2021-07-16
15h15 +00:00
2021-07-16
15h38 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:theforeman:katello:4.1.0:rc2:*:*:*:*:*:*

Informations

Vendor

theforeman

Product

katello

Version

4.1.0

Update

rc2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-14623 2018-12-13 21h00 +00:00 A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is vulnerable.
4.3
Medium