Skip to content
Sign in
5.4 Medium

CVE-2017-7513 It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509…

Description

It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.

Affected products and versions

Product Affected versions Fixed in
Red Hat Satellite 5 No fix stated

Other CVEs of Red Hat Satellite

The 2 CVEs of Red Hat Satellite →
CVE-2017-7514 A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before… 4.3 Medium
Track this CVE