CVE-2016-9595: Red Hat Satellite

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

Affected products

• Red Hat Satellite: version 6.3 only
• Red Hat Satellite Capsule: version 6.3 only
• Theforeman Katello: before 3.4.0 (fixed in 3.4.0)

Published 2018-07-27. Last modified 2026-06-17.