{"action":"Upgrade katello to 1.0.6 or later.","affected":[{"fixed":"1.0.6","introduced":"0"},{"fixed":"1.1.7","introduced":"1.1.0"}],"component":"katello","cve_ids":["CVE-2012-3503"],"ecosystem":"RubyGems","epss":0.03002,"exploited":false,"fixed_versions":["1.0.6","1.1.7"],"ghsa_id":"GHSA-5xv2-q475-rwrh","id":"tcs_01M5KEH5QYE39A4R49N8S7ECRE","modified_at":"2024-04-11T15:43:37Z","published_at":"2022-05-17T05:13:13Z","references":["https://osv.dev/vulnerability/GHSA-5xv2-q475-rwrh","https://nvd.nist.gov/vuln/detail/CVE-2012-3503","https://github.com/Katello/katello/pull/499","https://github.com/Katello/katello/commit/7c256fef9d75029d0ffff58ff1dcda915056d3a3","https://github.com/Katello/katello","https://github.com/advisories/GHSA-5xv2-q475-rwrh","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/katello/CVE-2012-3503.yml","https://web.archive.org/web/20140806122239/http://secunia.com/advisories/50344","https://web.archive.org/web/20200229120740/http://www.securityfocus.com/bid/55140","http://rhn.redhat.com/errata/RHSA-2012-1186.html","http://rhn.redhat.com/errata/RHSA-2012-1187.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-5xv2-q475-rwrh","url":"https://osv.dev/vulnerability/GHSA-5xv2-q475-rwrh"}],"summary":"Katello uses hard coded credential"}