PatchSiren cyber security CVE debrief
CVE-2026-12515 Red Hat CVE debrief
CVE-2026-12515 is a medium-severity vulnerability in Red Hat Satellite's Katello component. It stems from insufficient authorization checks in the ContentUploadsController, allowing users with edit_products permission to query content information for repositories they shouldn't access. This issue, published on 2026-06-17, was modified on 2026-06-18. Exploitation requires authentication but doesn't permit unauthorized content modification, import, or publication.
- Vendor
- Red Hat
- Product
- Red Hat Hardened Images
- CVSS
- MEDIUM 4.3
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-17
- Original CVE updated
- 2026-06-18
- Advisory published
- 2026-06-17
- Advisory updated
- 2026-06-18
Who should care
Red Hat Satellite administrators, security teams managing Red Hat Satellite, and users with edit_products permissions in Katello should be aware of this vulnerability. Although it doesn't allow content modification, it could be used to gather information about repository contents.
Technical summary
The vulnerability is caused by inadequate authorization checks in Katello's ContentUploadsController. Specifically, users with the edit_products permission can query content information for repositories outside their authorized management scope. This could potentially be exploited by authenticated attackers to determine the existence of specific content in otherwise inaccessible repositories. The issue has a CVSS score of 4.3 and is classified as CWE-862 (Missing Authorization).
Defensive priority
Medium
Recommended defensive actions
- Review and restrict edit_products permissions to ensure only authorized users have this capability.
- Monitor repository access logs for unusual query patterns.
- Implement additional access controls to limit repository content information disclosure.
- Apply patches or updates provided by Red Hat as soon as available.
- Consider implementing a Web Application Firewall (WAF) to detect and prevent exploitation attempts.
- Conduct regular security audits to identify and address potential authorization issues.
Evidence notes
The information provided is based on data from the National Vulnerability Database (NVD) and Red Hat security advisories. The CVE record and NVD detail pages were referenced in compiling this debrief. Additional information was sourced from Red Hat's security CVE page and a Bugzilla entry related to this issue.
Official resources
This debrief is based on publicly available information from official sources. It is intended for general informational purposes only and should not be used for any other purpose.