Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 6
python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce rhn_satellite_6: cross-site request forgery (CSRF) can force logout foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords
cpe:/a:redhat:satellite:6.1::el6 cpe:/a:redhat:satellite_capsule:6.1::el6