Red Hat Satellite, a system management solution for provisioning and configuration management, has security vulnerabilities identified as CVE-2024-7012 and CVE-2024-7923. Both are authentication bypass vulnerabilities affecting the Foreman and pulpcore components respectively. Red Hat has released an update in Satellite version 6.15.3.1 for RHEL 8 to fix these issues. The advisory RHSA-2024:6335 rates the security impact as important and recommends upgrading to the updated packages. No CVSS score is provided in the advisory. The update includes fixes for bugs tracked under BZ-2299429 and BZ-2305718.

The vulnerabilities allow authentication bypass in critical components of Red Hat Satellite, potentially enabling unauthorized access to system management functions. This could compromise the integrity and security of managed systems. The advisory rates the impact as important, indicating a significant security risk if left unpatched.

Red Hat has released updated packages in Satellite 6.15.3.1 that fix the authentication bypass vulnerabilities. Users should apply this update promptly after ensuring all previous relevant errata are applied. Detailed update instructions are provided by Red Hat in their official documentation. No additional mitigation steps are indicated beyond applying the official update.