Improper Authentication in Red Hat Satellite - CVE-2021-4142

Vulnerability identifier: #VU61248

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-4142

CWE-ID: CWE-287

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in when processing authentication requests. A remote attacker can bypass authentication process by using the simple content access certificate for authentication with Candlepin.

Red Hat Satellite
tfm-rubygem-foreman_rh_cloud (Red Hat package)
foreman (Red Hat package)
python-pulp-container (Red Hat package)
python-pulpcore (Red Hat package)
tfm-rubygem-pulp_rpm_client (Red Hat package)
python-pulp-rpm (Red Hat package)
tfm-rubygem-katello (Red Hat package)
tfm-rubygem-foreman_ansible (Red Hat package)
satellite (Red Hat package)
python-aiohttp-xmlrpc (Red Hat package)
candlepin (Red Hat package)

Install updates from vendor's website.

Red Hat Satellite - update to 6.10.3
tfm-rubygem-foreman_rh_cloud (Red Hat package) - update to 4.0.31-1.el7sat
foreman (Red Hat package) - update to 2.5.2.19-1.el7sat
python-pulp-container (Red Hat package) - update to 2.8.4-0.1.el7pc
python-pulpcore (Red Hat package) - update to 3.14.12-1.el7pc
tfm-rubygem-pulp_rpm_client (Red Hat package) - update to 3.14.12.1-1.el7sat
python-pulp-rpm (Red Hat package) - update to 3.14.12-1.el7pc
tfm-rubygem-katello (Red Hat package) - update to 4.1.1.48-1.el7sat
tfm-rubygem-foreman_ansible (Red Hat package) - update to 6.3.4.1-1.el7sat
satellite (Red Hat package) - update to 6.10.3-1.el7sat
python-aiohttp-xmlrpc (Red Hat package) - update to 1.3.2-0.1.el7pc
candlepin (Red Hat package) - update to 4.0.15-1.el7sat

• https://bugzilla.redhat.com/show_bug.cgi?id=2034346

• Authentication bypass in Red Hat Satellite