CVE-2013-4201 Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissions.
MediumCVSS 4.3
EPSS 0.74%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| katello | All versions | No fix listed |
References
- bugzilla.redhat.com issue-tracking vendor-advisory