CVE-2016-9595

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2016-9595

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9595.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2016-9595

Downstream

RHSA-2018:0336

Published

2018-07-27T18:29:00.237Z

Modified

2026-06-18T03:55:57.709331109Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:a:redhat:satellite:6.3:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "6.3"
                }
            ],
            "vendor_product": "redhat:satellite"
        },
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:a:redhat:satellite_capsule:6.3:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "6.3"
                }
            ],
            "vendor_product": "redhat:satellite_capsule"
        }
    ]
}

References

Affected packages

Git / github.com/katello/katello

Affected ranges

Type

GIT

Repo

https://github.com/katello/katello

Events

Introduced

Fixed

600b173da31275e2b6852faf0dd59feb1d2fdb8f

Database specific

{
    "cpe": "cpe:2.3:a:theforeman:katello:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.4.0"
        }
    ]
}

Affected versions

2.*

2.4.0-RC1

3.*

3.4.0.rc2

katello-1.*

katello-1.4.2-1

katello-1.4.3-1

katello-1.4.4-1

katello-1.4.5-1

katello-1.4.6-1

katello-1.4.7-1

katello-1.4.8-1

katello-1.4.9-1

katello-1.5.0-12

katello-1.5.0-13

katello-1.5.0-14

katello-1.5.1-1

katello-2.*

katello-2.0.0-0

katello-2.1.0-1

katello-2.2.0-1

katello-2.3.0-1

rubygem-katello-1.*

rubygem-katello-1.5.0-10

rubygem-katello-1.5.0-11

rubygem-katello-1.5.0-12

rubygem-katello-1.5.0-9

rubygem-katello-2.*

rubygem-katello-2.0.0-1

rubygem-katello-2.1.0-1

rubygem-katello-2.2.0-1

rubygem-katello-2.2.0-2

rubygem-katello-2.3.0-1

rubygem-katello-2.3.0-2

rubygem-katello-2.4.0-1

rubygem-katello-2.4.0-2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9595.json"