satellite: remote package upload without authorization

spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when modwsgi is used, which allows remote attackers to cause a denial of service /var partition disk consumption and failed updates via a...

PT-2011-1046

Name of the Vulnerable Software and Affected Versions ViewVC versions prior to 1.1.15 Description The issue concerns the remote SVN views functionality in ViewVC, where improper authorization allows remote attackers to bypass intended access restrictions. This could lead to a breach of...

rhpki-ra: improper authorization checks in Cerificate System's Registration Authority

agent/request/op.cgi in the Registration Authority RA component in Red Hat Certificate System RHCS 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field...