CVE-2008-2369 Hardcoded credentials in n/a
Remote attackers can use a hard-coded authentication key to access Red Hat Network Satellite Server and obtain sensitive user account and entitlement information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-2369?
CVE-2008-2369 is a critical vulnerability in Redhat Satellite, published on 14 Aug 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect to the server and obtain sensitive information about user accounts and entitlements.
Weakness: CWE-798
Which versions are affected by CVE-2008-2369?
It affects 1 product.
Products include Redhat Satellite.
How do I fix CVE-2008-2369?
Upgrade to a fixed version.
Is CVE-2008-2369 being exploited?
There is no known exploitation of CVE-2008-2369 in the wild and no public exploit code.
Other vulnerabilities in Redhat Satellite
- CVE-2024-7012 Puppet-foreman: an authentication bypass vulnerability exists in foreman
- CVE-2024-7923 Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
- CVE-2026-96659 Foreman: excessive permissions for viewer role on preview
- CVE-2023-0118 Foreman: arbitrary code execution through templates
- CVE-2026-96658 Foreman: foreman: arbitrary code execution via safemode sandbox bypass
Sources
Also known as GHSA-53xg-795p-rwf7.