CVE-2024-8553: Red Hat Satellite 6.13 For Rhel 8

Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions and access sensitive information.

Affected products

• Red Hat Red Hat Satellite 6.13 For Rhel 8: before 0:3.5.1.25-1.el8sat (fixed in 0:3.5.1.25-1.el8sat)
• Red Hat Red Hat Satellite 6.14 For Rhel 8: before 0:3.7.0.14-1.el8sat (fixed in 0:3.7.0.14-1.el8sat)
• Red Hat Red Hat Satellite 6.15 For Rhel 8: before 0:3.9.1.11-1.el8sat (fixed in 0:3.9.1.11-1.el8sat)
• Red Hat Red Hat Satellite 6.16 For Rhel 8: before 0:3.12.0.1-1.el8sat (fixed in 0:3.12.0.1-1.el8sat)
• Red Hat Red Hat Satellite 6.16 For Rhel 9: before 0:3.12.0.1-1.el9sat (fixed in 0:3.12.0.1-1.el9sat)

Published 2024-10-31. Last modified 2026-06-17.