Skip to content
Fencer Intel
high 8.0

CVE-2019-3845 json

A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before…

published 7y ago modified 4mo ago also EUVD-2019-13465

cvss
8.0
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.7%
EPSS 0.7% chance of exploitation in 30 days, percentile 52%
public exploits
0
none known

Summary

A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1. A malicious user authenticated to a host registered to Satellite (or Capsule) can use this flaw to access QMF methods to any host also registered to Satellite (or Capsule) and execute privileged commands.

Patch / fix

  • redhat satellite 6.2
  • katello-installer-base satellite capsule 6.3, satellite 6.3 3.4.5.35-1.el7sat
  • satellite satellite capsule 6.3, satellite 6.3 6.3.5.1-1.el7sat
  • satellite-cli satellite 6.3 6.3.5.1-1.el7sat
  • satellite-common satellite capsule 6.3, satellite 6.3 6.3.5.1-1.el7sat
  • satellite-capsule satellite capsule 6.3, satellite 6.3 6.3.5.1-1.el7sat
  • satellite-debug-tools satellite capsule 6.3, satellite 6.3 6.3.5.1-1.el7sat
  • foreman-installer-katello satellite capsule 6.3, satellite 6.3 3.4.5.35-1.el7sat
  • tfm RHEL 6.5 SATELLITE_TOOLS 5.0-3.el7sat

red hat advisories RHSA-2019:0733RHSA-2019:1223RHSA-2019:0735RHSA-2019:0734

Is CVE-2019-3845 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2019-3845 updated cvss 8.0

katello-installer-base: QMF methods exposed to goferd via qdrouterd

  • Red Hat Satellite 6.2 qpid-cpp 1.36.0-19.el6, qpid-cpp 1.36.0-19.el7, qpid-qmf 1.36.0-19.el6, qpid-qmf 1.36.0-19.el7, python-qpid 1.35.0-5.el6, python-qpid 1.35.0-5.el7, +43 more
    fixed: vendor fix RHSA-2019:0734
  • Red Hat Satellite 6.3 satellite 6.3.5.1-1.el7sat, satellite-cli 6.3.5.1-1.el7sat, satellite-common 6.3.5.1-1.el7sat, satellite-capsule 6.3.5.1-1.el7sat, satellite-debug-tools 6.3.5.1-1.el7sat, katello-installer-base 3.4.5.35-1.el7sat, +1 more
    fixed: vendor fix RHSA-2019:0733
  • Red Hat Satellite 6.4 katello-installer-base 3.7.0.19-1.el7sat
    fixed: vendor fix RHSA-2019:0735
  • Red Hat Satellite Capsule 6.2 qpid-cpp 1.36.0-19.el6, qpid-cpp 1.36.0-19.el7, qpid-qmf 1.36.0-19.el6, qpid-qmf 1.36.0-19.el7, python-qpid 1.35.0-5.el6, python-qpid 1.35.0-5.el7, +34 more
    fixed: vendor fix RHSA-2019:0734
  • Red Hat Satellite Capsule 6.3 satellite 6.3.5.1-1.el7sat, satellite-common 6.3.5.1-1.el7sat, satellite-capsule 6.3.5.1-1.el7sat, satellite-debug-tools 6.3.5.1-1.el7sat, katello-installer-base 3.4.5.35-1.el7sat, foreman-installer-katello 3.4.5.35-1.el7sat
    fixed: vendor fix RHSA-2019:0733
  • Red Hat Satellite Capsule 6.4 katello-installer-base 3.7.0.19-1.el7sat
    fixed: vendor fix RHSA-2019:0735
  • Red Hat Satellite 6.4 satellite 6.4.2.1-1.el7sat, satellite-cli 6.4.2.1-1.el7sat, satellite-common 6.4.2.1-1.el7sat, satellite-capsule 6.4.2.1-1.el7sat, satellite-debug-tools 6.4.2.1-1.el7sat, foreman-installer-katello 3.7.0.19-1.el7sat Red Hat Satellite Capsule 6.4 satellite 6.4.2.1-1.el7sat, satellite-common 6.4.2.1-1.el7sat, satellite-capsule 6.4.2.1-1.el7sat, satellite-debug-tools 6.4.2.1-1.el7sat, foreman-installer-katello 3.7.0.19-1.el7sat
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.68% chance of exploitation in the next 30 days, higher than 52% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.0 8.0 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 5.2 AV:A/AC:L/Au:S/C:P/I:P/A:P

Affected products

  • Red Hat qpid-dispatch-router

Classification

Weakness

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.