What is CVE-2017-15136?

CVE-2017-15136 is a low-severity vulnerability in Red Hat, Inc. Satellite 6, classified under Improper Input Validation. CVSS score: 2.7/10. Published 2018-02-27.

How severe is CVE-2017-15136?

Low severity. CVSS v3 base score is 2.7 out of 10.

Improper input validation in Red Hat, Inc. Satellite 6

CVE-2017-15136

When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the hostname of a previously registered system the previously registered system will lose access to updates including security updates.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.7 (Low). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L.

Affected products

Red Hat, Inc. Satellite 6 — versions 6.3.0
Redhat Satellite — versions 6.0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
secalert@redhat.com (x_refsource_CONFIRM, Issue Tracking)

Frequently asked questions

What is CVE-2017-15136?: CVE-2017-15136 is a low-severity vulnerability in Red Hat, Inc. Satellite 6, classified under Improper Input Validation. CVSS score: 2.7/10. Published 2018-02-27.
How severe is CVE-2017-15136?: Low severity. CVSS v3 base score is 2.7 out of 10.