title: Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server
description: Foreman: API permits HTTP requests when require_ssl is enabled foreman: XSS in hidden parameter value switcher pulp: Node certificate containing private key stored in world-readable file pulp: Insecure temporary file used when generating certificate for Pulp Nodes pulp: Race condition when generating RSA keys for authenticating messages between server and consumers pulp: Agent certificate containing private key is stored in world-readable file foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter
cpes: cpe:/a:redhat:satellite:6.1::el6 cpe:/a:redhat:satellite:6.2::el7 cpe:/a:redhat:satellite_capsule:6.1::el6 cpe:/a:redhat:satellite_capsule:6.2::el7