The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17606 advisory.

    Red Hat Satellite is a system management solution that allows organizations     to configure and maintain their systems without the necessity to provide     public Internet access to their servers or other client systems. It     performs provisioning and configuration management of predefined standard     operating environments.

    Security Fix(es):

    * puppet-agent: incomplete fix for CVE-2024-49761 (CVE-2025-10990)
    * python-django: Django SQL injection in FilteredRelation column aliases (CVE-2025-57833)
    * cjson: out-of-bounds access in decode_array_index_from_pointer() in cJSON_Utils.c via crafted JSON     pointer strings (CVE-2025-57052)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : Satellite 6.17.5 Async Update (Important) (RHSA-2025:17606)

critical Nessus Plugin ID 269753

Version 1.2

Version 1.1

Version 1.2 Oct 14, 2025, 8:03 AM Plugin metadata Plugin Feed: 202510140803
Version 1.1 Oct 9, 2025, 2:13 PM New Plugin Feed: 202510091413