CVE-2016-3072 Katello SQL Injection vulnerabilities
HighCVSS 8.8
EPSS 1.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow remote authenticated users to execute arbitrary SQL commands via the (1) sort_by or (2) sort_order parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems katello(RubyGems) | < 2.4.3 | 2.4.3 |
| rubygems katello(RubyGems) | = 1.5.0 | No fix listed |
| rubygems katello(RubyGems) | = 2.2.2 | No fix listed |
| rubygems katello(RubyGems) | = 2.4.0 | No fix listed |
| rubygems katello(RubyGems) | = 2.4.0.rc1 | No fix listed |
| rubygems katello(RubyGems) | = 2.4.0.rc2 | No fix listed |
| rubygems katello(RubyGems) | = 2.4.0.rc3 | No fix listed |
| rubygems katello(RubyGems) | = 2.4.1 | No fix listed |
| rubygems katello(RubyGems) | = 2.4.2 | No fix listed |
| katello | All versions | No fix listed |
| redhat satellite | = 6.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- RHSA-2016:1083 vendor-advisory
- bugzilla.redhat.com
- github.com patch
- access.redhat.com
- github.com exploit
- github.com
- github.com product