title: Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 7
description: TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords
cpes: cpe:/a:redhat:satellite:6.1::el7 cpe:/a:redhat:satellite_capsule:6.1::el7