CVE-2017-7513

It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.

Score

CVSS 3.0 5.4 Medium

Status

Modified - secalert@redhat.com

Published

2018-08-22

Last modified

2024-08-05

Weaknesses

CWE-295

Affected products

• Red Hat Satellite (Red Hat)
• Satellite (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7513
• https://access.redhat.com/security/cve/cve-2017-7513