The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1630 advisory.

    Red Hat Satellite is a system management solution that allows organizations to configure and maintain     their systems without the necessity to provide public Internet access to their servers or other client     systems. It performs provisioning and configuration management of predefined standard operating     environments.

    Security fix(es):

    * Candlepin: PreparedStatement.setText(int, InputStream) will create a temporary file if the InputStream     is larger than 2k (CVE-2022-41946)

    This update fixes the following bugs:

    2163538 - Pages Blank     2174984 - Getting 'null value in column \image_manifest_id\ violates not-null constraint' when syncing     openstack container repos     2174987 - (Regression of 2033940) Error: AttributeError: 'NoneType' object has no attribute 'cast' thrown     while listing repository versions     2174994 - VMware Image based Provisioning fails with error- : Could not find virtual machine network     interface matching <IP>     2174997 - Package and Errata actions on content hosts selected using the select all hosts option fails.
    2174998 - Subscription can't be blank, A Pool and its Subscription cannot belong to different     organizations     2175002 - Getting undefined method `schema_version' for nil:NilClass while syncing from quay.io     2175005 - New kickstart_kernel_options snippet breaks UEFI (Grub2) PXE provisioning when boot_mode is     static     2175008 - RHEL 9 as Guest OS is not available on Satellite 6.11     2174995 - Health check should use hostname -f     2175007 - [regression] data.yml is referring to old sync plain id which does not exist in     katello_sync_plans     2176272 - new wait task introduced by rh_cloud 6.0.44 is not recognized by maintain as OK to interrupt     2175010 - Some custom repositories are failing to synchorize with error This field may not be blank     after upgrading to Red Hat Satellite 6.11     2176922 - [RFE] Need syncable yum-format repository imports     2175003  - Can't perform incremental content exports in syncable format

    Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : Satellite 6.12.3 Async Security Update (Important) (RHSA-2023:1630)

medium Nessus Plugin ID 194288

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Nov 7, 2024, 5:29 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411071729
Version 1.1 Jun 3, 2024, 7:01 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202406031901
Version 1.0 Apr 28, 2024, 2:25 PM New Plugin Feed: 202404281425