Important: Red Hat Security Advisory: Satellite 6.17.0 release

A new release is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has classified this update as having a Moderate security impact. Each vulnerability includes a CVSS base score, providing a detailed severity assessment, which can be found via the CVE links in the...

Adversarial Observations in Weather Forecasting

AI-based systems, such as Google's GenCast, have recently redefined the state of the art in weather forecasting, offering more accurate and timely predictions of both everyday weather and extreme events. While these systems are on the verge of replacing traditional meteorological methods, they al...

RHEL 6 : spacewalk-java (RHSA-2014:1184)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1184 advisory. Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of...

The vulnerability of the Jenkins automation server plugin Asakusa Satellite lies in the lack of password masking, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server plugin Asakusa Satellite is related to the absence of password masking. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Jenkins automation server plugin Asakusa Satellite lies in the lack of password masking, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server plugin Asakusa Satellite is related to the absence of password masking. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

RHEL 8 : Satellite 6.14.4.5 Async Update (Important) (RHSA-2025:3492)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3492 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to...

RHEL 8 / 9 : Satellite 6.16.4 Async Update (Important) (RHSA-2025:3490)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3490 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessit...

RHEL 8 : Satellite 6.15.5.2 Async Update (Important) (RHSA-2025:3491)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3491 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to...

Cleartext Storage of Sensitive Information

Overview org.codefirst.jenkins.asakusasatellite:asakusa-satellite-plugin is an AsakusaSatellite Plugin. Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in an unencrypted format within the config.xml files. An attacker can access these API keys by...

CVE-2025-31727

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

RHSA-2025:3491 Red Hat Security Advisory: Satellite 6.15.5.2 Async Update

Bulletin has no description...

RHSA-2025:3492 Red Hat Security Advisory: Satellite 6.14.4.5 Async Update

Bulletin has no description...

RHSA-2025:3490 Red Hat Security Advisory: Satellite 6.16.4 Async Update

Bulletin has no description...

Jenkins plugin AsakusaSatellite 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin ... A security...

Important: Red Hat Security Advisory: Satellite 6.16.4 Async Update

A new release is now available for Red Hat Satellite 6.16 for RHEL 8 and 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: Satellite 6.14.4.5 Async Update

An update is now available for Red Hat Satellite 6.14 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Important: Red Hat Security Advisory: Satellite 6.15.5.2 Async Update

An update is now available for Red Hat Satellite 6.15 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Satellite Navigation Systems Facing Rising Jamming and Spoofing Attacks

Satellite navigation systems are under rising threat from jamming and spoofing attacks, risking aviation, maritime, and telecom safety worldwide, warn global agencies...

CVE-2025-2157

A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, exposing sensitive command outputs, such as /etc/shadow. This issue can lead to information disclosure and privilege escalation if exploited...

CVE-2025-2157

CVE-2025-2157 affects Foreman/Red Hat Satellite. The flaw is due to improper file permissions that let low-privilege OS users monitor and access temporary files under /var/tmp, potentially exposing sensitive command outputs such as /etc/shadow. Reported impact includes information disclosure and ...