Katello kayıtları
katello üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %33,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-275 Permission Issues1
- CWE-399 Resource Management Errors1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2016-3072İstismar yok | Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow rekatello · katello · CWE-89 | Yüksek8,8 | — | %1,8 | 7 Haz 2016 |
20İzleyin | CVE-2014-3712İstismar yok | Katello allows remote attackers to cause a denial of service (memory consumption) via the (1) mode parameter in the setup_utils function in katello · katello · CWE-399 | Orta5,0 | — | %1,7 | 3 Kas 2014 |
17İzleyin | CVE-2013-4201İstismar yok | Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissionkatello · katello · CWE-275 | Orta4,3 | — | %0,7 | 1 May 2018 |
8İzleyin | CVE-2013-4455İstismar yok | Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, katello · katello installer · CWE-264 | Düşük2,1 | — | %0,5 | 14 May 2014 |
8İzleyin | CVE-2012-5561İstismar yok | script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local usekatello · katello · CWE-200 | Düşük2,1 | — | %0,3 | 1 Mar 2013 |
8İzleyin | CVE-2012-6116İstismar yok | modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrakatello · katello · CWE-264 | Düşük2,1 | — | %0,2 | 1 Mar 2013 |
- CVE-2016-307236İzleyin
Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow re
YüksekCVSS 8,8İstismar yokEPSS %2katello · katello7 Haz 2016
- CVE-2014-371220İzleyin
Katello allows remote attackers to cause a denial of service (memory consumption) via the (1) mode parameter in the setup_utils function in
OrtaCVSS 5,0İstismar yokEPSS %2katello · katello3 Kas 2014
- CVE-2013-420117İzleyin
Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permission
OrtaCVSS 4,3İstismar yokEPSS %1katello · katello1 May 2018
- CVE-2013-44558İzleyin
Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node,
DüşükCVSS 2,1İstismar yokEPSS %0katello · katello installer14 May 2014
- CVE-2012-55618İzleyin
script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local use
DüşükCVSS 2,1İstismar yokEPSS %0katello · katello1 Mar 2013
- CVE-2012-61168İzleyin
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstra
DüşükCVSS 2,1İstismar yokEPSS %0katello · katello1 Mar 2013