CVE-2020-14380: Red Hat Satellite

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite.

Affected products

• Red Hat Satellite: version 6.7.2 only

Published 2021-06-02. Last modified 2026-06-17.