{"containers": {"cna": {"affected": [{"product": "Puppet server", "vendor": "Puppet", "versions": [{"status": "affected", "version": "Puppet prior to 4.10.1"}]}], "datePublic": "2017-05-11T00:00:00", "descriptions": [{"lang": "en", "value": "Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML."}], "problemTypes": [{"descriptions": [{"description": "Remote Code Execution", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-11-03T18:57:01", "orgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "shortName": "puppet"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://puppet.com/security/cve/cve-2017-2295"}, {"name": "DSA-3862", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2017/dsa-3862"}, {"name": "98582", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/98582"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "DATE_PUBLIC": "2017-05-11T00:00:00", "ID": "CVE-2017-2295", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Puppet server", "version": {"version_data": [{"version_value": "Puppet prior to 4.10.1"}]}}]}, "vendor_name": "Puppet"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Remote Code Execution"}]}]}, "references": {"reference_data": [{"name": "https://puppet.com/security/cve/cve-2017-2295", "refsource": "CONFIRM", "url": "https://puppet.com/security/cve/cve-2017-2295"}, {"name": "DSA-3862", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2017/dsa-3862"}, {"name": "98582", "refsource": "BID", "url": "http://www.securityfocus.com/bid/98582"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T13:48:05.197Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://puppet.com/security/cve/cve-2017-2295"}, {"name": "DSA-3862", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2017/dsa-3862"}, {"name": "98582", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/98582"}]}]}, "cveMetadata": {"assignerOrgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "assignerShortName": "puppet", "cveId": "CVE-2017-2295", "datePublished": "2017-07-05T15:00:00Z", "dateReserved": "2016-12-01T00:00:00", "dateUpdated": "2024-09-16T20:43:40.186Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*", "matchCriteriaId": "6953B786-3CDF-48D0-AE6A-1B3924431986", "versionEndIncluding": "4.10.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML."}, {"lang": "es", "value": "Las versiones de Puppet anteriores a la 4.10.1 deserializar\u00e1n datos \"off the wire\" (del agente al servidor, en este caso) con un formato especificado por el atacante. Esto podr\u00eda emplearse para forzar la deserializaci\u00f3n YAML de forma no segura, lo que conducir\u00eda a la ejecuci\u00f3n remota de c\u00f3digo. Este cambio limita el formato de los datos on the wire a PSON o a YAML descodificado de forma segura."}], "id": "CVE-2017-2295", "lastModified": "2024-11-21T03:23:13.763", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 5.8, "source": "[email protected]", "type": "Primary"}]}, "published": "2017-07-05T15:29:00.207", "references": [{"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2017/dsa-3862"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/98582"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://puppet.com/security/cve/cve-2017-2295"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2017/dsa-3862"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/98582"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://puppet.com/security/cve/cve-2017-2295"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "[email protected]", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "candlepin-0:2.1.14-1.el7", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "foreman-0:1.15.6.34-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "foreman-bootloaders-redhat-0:201801241201-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "foreman-discovery-image-0:3.4.4-1", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "foreman-installer-1:1.15.6.8-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "foreman-proxy-0:1.15.6.4-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "foreman-selinux-0:1.15.6.2-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "hiera-0:1.3.1-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "katello-0:3.4.5-15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "katello-certs-tools-0:2.4.0-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "katello-client-bootstrap-0:1.5.1-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "katello-installer-base-0:3.4.5.26-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "katello-selinux-0:3.0.2-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "kobo-0:0.5.1-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "pulp-0:2.13.4.6-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "pulp-docker-0:2.4.1-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "pulp-katello-0:1.0.2-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "pulp-ostree-0:1.2.1.1-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "pulp-puppet-0:2.13.4-3.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "pulp-rpm-0:2.13.4.8-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "puppet-foreman_scap_client-0:0.3.16-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "python-zope-interface-0:4.0.5-4.el7", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "redhat-access-insights-puppet-0:0.0.9-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-foreman_scap_client-0:0.3.0-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-kafo-0:2.0.2-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-kafo_parsers-0:0.1.6-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-kafo_wizards-0:0.0.1-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-smart_proxy_dhcp_remote_isc-0:0.0.2.1-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-smart_proxy_discovery-0:1.0.4-3.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-smart_proxy_discovery_image-0:1.0.9-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-smart_proxy_dynflow-0:0.1.10-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-smart_proxy_openscap-0:0.6.9-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-smart_proxy_pulp-0:1.3.0-1.git.0.b5c2768.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-smart_proxy_remote_execution_ssh-0:0.1.6-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "rubygem-tilt-0:1.3.7-2.git.0.3b416c9.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "satellite-0:6.3.0-23.0.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "satellite-installer-0:6.3.0.12-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-bastion-0:5.1.1.4-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman_bootdisk-0:10.0.2.2-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman_discovery-0:9.1.5.3-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman_docker-0:3.1.0.3-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman_hooks-0:0.3.14-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman_openscap-0:0.7.11-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman-redhat_access-0:2.0.13-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman_remote_execution-0:1.3.7.2-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman_remote_execution_core-0:1.0.6-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman-tasks-0:0.9.6.4-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman-tasks-core-0:0.1.8-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman_templates-0:5.0.1-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman_theme_satellite-0:1.0.4.16-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-foreman_virt_who_configure-0:0.1.9-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli-0:0.11.0.1-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_csv-0:2.3.0-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman-0:0.11.0.5-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_admin-0:0.0.8-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_bootdisk-0:0.1.3.3-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_discovery-0:1.0.0-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_docker-0:0.0.6-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_openscap-0:0.1.5-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_remote_execution-0:0.0.6-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_tasks-0:0.0.12-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_virt_who_configure-0:0.0.3-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-hammer_cli_katello-0:0.11.3.5-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-katello-0:3.4.5.58-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-ovirt_provision_plugin-0:1.0.2-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite:6.3::el7", "package": "tfm-rubygem-smart_proxy_dynflow_core-0:0.1.10-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "candlepin-0:2.1.14-1.el7", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "foreman-0:1.15.6.34-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "foreman-bootloaders-redhat-0:201801241201-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "foreman-discovery-image-0:3.4.4-1", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "foreman-installer-1:1.15.6.8-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "foreman-proxy-0:1.15.6.4-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "foreman-selinux-0:1.15.6.2-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "hiera-0:1.3.1-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "katello-0:3.4.5-15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "katello-certs-tools-0:2.4.0-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "katello-client-bootstrap-0:1.5.1-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "katello-installer-base-0:3.4.5.26-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "katello-selinux-0:3.0.2-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "kobo-0:0.5.1-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "pulp-0:2.13.4.6-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "pulp-docker-0:2.4.1-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "pulp-katello-0:1.0.2-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "pulp-ostree-0:1.2.1.1-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "pulp-puppet-0:2.13.4-3.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "pulp-rpm-0:2.13.4.8-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "puppet-foreman_scap_client-0:0.3.16-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "python-zope-interface-0:4.0.5-4.el7", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "redhat-access-insights-puppet-0:0.0.9-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-foreman_scap_client-0:0.3.0-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-kafo-0:2.0.2-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-kafo_parsers-0:0.1.6-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-kafo_wizards-0:0.0.1-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-smart_proxy_dhcp_remote_isc-0:0.0.2.1-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-smart_proxy_discovery-0:1.0.4-3.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-smart_proxy_discovery_image-0:1.0.9-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-smart_proxy_dynflow-0:0.1.10-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-smart_proxy_openscap-0:0.6.9-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-smart_proxy_pulp-0:1.3.0-1.git.0.b5c2768.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-smart_proxy_remote_execution_ssh-0:0.1.6-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "rubygem-tilt-0:1.3.7-2.git.0.3b416c9.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "satellite-0:6.3.0-23.0.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "satellite-installer-0:6.3.0.12-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-bastion-0:5.1.1.4-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman_bootdisk-0:10.0.2.2-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman_discovery-0:9.1.5.3-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman_docker-0:3.1.0.3-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman_hooks-0:0.3.14-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman_openscap-0:0.7.11-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman-redhat_access-0:2.0.13-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman_remote_execution-0:1.3.7.2-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman_remote_execution_core-0:1.0.6-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman-tasks-0:0.9.6.4-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman-tasks-core-0:0.1.8-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman_templates-0:5.0.1-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman_theme_satellite-0:1.0.4.16-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-foreman_virt_who_configure-0:0.1.9-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli-0:0.11.0.1-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_csv-0:2.3.0-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman-0:0.11.0.5-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_admin-0:0.0.8-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_bootdisk-0:0.1.3.3-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_discovery-0:1.0.0-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_docker-0:0.0.6-2.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_openscap-0:0.1.5-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_remote_execution-0:0.0.6-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_tasks-0:0.0.12-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_foreman_virt_who_configure-0:0.0.3-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-hammer_cli_katello-0:0.11.3.5-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-katello-0:3.4.5.58-1.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-ovirt_provision_plugin-0:1.0.2-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}, {"advisory": "RHSA-2018:0336", "cpe": "cpe:/a:redhat:satellite_capsule:6.3::el7", "package": "tfm-rubygem-smart_proxy_dynflow_core-0:0.1.10-1.fm1_15.el7sat", "product_name": "Red Hat Satellite 6.3 for RHEL 7", "release_date": "2018-02-21T00:00:00Z"}], "bugzilla": {"description": "puppet: Unsafe YAML deserialization", "id": "1452651", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1452651"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-502", "details": ["Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML."], "name": "CVE-2017-2295", "package_state": [{"cpe": "cpe:/a:redhat:ceph_storage:1.3", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat Ceph Storage 1.3"}, {"cpe": "cpe:/a:redhat:openstack:5::el6", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)"}, {"cpe": "cpe:/a:redhat:openstack:6", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat Enterprise Linux OpenStack Platform 6 (Juno)"}, {"cpe": "cpe:/a:redhat:openstack-installer:6", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer"}, {"cpe": "cpe:/a:redhat:openstack:7", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)"}, {"cpe": "cpe:/a:redhat:openstack:10", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat OpenStack Platform 10 (Newton)"}, {"cpe": "cpe:/a:redhat:openstack:11", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat OpenStack Platform 11 (Ocata)"}, {"cpe": "cpe:/a:redhat:openstack:12", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat OpenStack Platform 12 (Pike)"}, {"cpe": "cpe:/a:redhat:openstack:8", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat OpenStack Platform 8 (Liberty)"}, {"cpe": "cpe:/a:redhat:openstack:9", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat OpenStack Platform 9 (Mitaka)"}, {"cpe": "cpe:/a:rhel_sam:1", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat Subscription Asset Manager"}], "public_date": "2017-05-11T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2017-2295\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-2295\nhttps://puppet.com/security/cve/cve-2017-2295"], "threat_severity": "Important", "upstream_fix": "puppet 4.10.1, puppet agent 1.10.1"}