Red Hat Satellite, a system management solution for provisioning and configuration management, has two authentication bypass vulnerabilities identified as CVE-2024-7012 in Foreman and CVE-2024-7923 in pulpcore. These vulnerabilities allow bypassing authentication mechanisms, potentially enabling unauthorized access to system management functions. Red Hat has released updated packages in Satellite 6.13.7.2 to fix these issues. The advisory RHSA-2024:6337 recommends applying these updates and ensuring all previous errata are applied. No CVSS score is provided, but the update is rated as important.

Successful exploitation of these authentication bypass vulnerabilities could allow an attacker to gain unauthorized access to Red Hat Satellite management functions, potentially compromising system provisioning and configuration management. The exact impact depends on the environment and usage of the affected components.

Red Hat has released updated packages in Red Hat Satellite 6.13.7.2 that fix these authentication bypass vulnerabilities. Users should upgrade to these updated packages as advised in the Red Hat advisory RHSA-2024:6337. Before applying this update, ensure all previously released errata relevant to the system have been applied. Follow the official Red Hat Satellite upgrade documentation for detailed instructions. No additional mitigation steps are indicated by the vendor.