Katello uses hard coded credential

🗓️ 17 May 2022 05:13:13Reported by GitHub Advisory DatabaseType

Katello installation script generates the same secret token, allowing remote authenticatio

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2012-3503	12 Apr 202408:31	–	circl
CVE	CVE-2012-3503	25 Aug 201210:00	–	cve
Cvelist	CVE-2012-3503	25 Aug 201210:00	–	cvelist
NVD	CVE-2012-3503	25 Aug 201210:29	–	nvd
OSV	GHSA-5XV2-Q475-RWRH Katello uses hard coded credential	17 May 202205:13	–	osv
Prion	Default configuration	25 Aug 201210:29	–	prion
Positive Technologies	PT-2012-4767 · Red Hat · Katello	25 Aug 201200:00	–	ptsecurity
Tenable Nessus	RHEL 6 : katello (RHSA-2012:1186)	27 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 6 : katello (RHSA-2012:1187)	24 Jan 201300:00	–	nessus
RedHat Linux	Important: Red Hat Security Advisory: katello security update	21 Aug 201220:10	–	redhat

Vulners

Node

katello katelloRange1.1.0–1.1.7rubygems

katello katelloRange<1.0.6rubygems

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2012-3503
github	www.github.com/Katello/katello/pull/499
github	www.github.com/Katello/katello/commit/7c256fef9d75029d0ffff58ff1dcda915056d3a3
rhn	www.rhn.redhat.com/errata/RHSA-2012-1186.html
rhn	www.rhn.redhat.com/errata/RHSA-2012-1187.html
web	www.web.archive.org/web/20140806122239/http://secunia.com/advisories/50344
web	www.web.archive.org/web/20200229120740/http://www.securityfocus.com/bid/55140
github	www.github.com/advisories/GHSA-5xv2-q475-rwrh
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/katello/CVE-2012-3503.yml

14 Mar 2026 05:08Current

9.6High risk

Vulners AI Score9.6

CVSS 26.5

CVSS 3.19.8

EPSS0.01303