PT-2026-53837 · Red Hat · Red Hat Satellite 6

Publicado 2026-06-30 · Atualizado 2026-06-30 · CVE-2026-13316

NVD

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

A flaw has been found in foreman when HTTP parameters are modified in http proxies controller and http proxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-13316

Produtos afetados

Red Hat Satellite 6

Referências · 3

• https://access.redhat.com/security/cve/CVE-2026-13316 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2490345 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13316 · Nota de Segurança