CVE-2024-35195

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-35195", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-05-10T14:24:24.342Z", "datePublished": "2024-05-20T20:14:48.206Z", "dateUpdated": "2025-07-31T03:56:03.717Z"}, "containers": {"cna": {"title": "Requests `Session` object does not verify requests after making first request with verify=False", "problemTypes": [{"descriptions": [{"cweId": "CWE-670", "lang": "en", "description": "CWE-670: Always-Incorrect Control Flow Implementation", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56"}, {"name": "https://github.com/psf/requests/pull/6655", "tags": ["x_refsource_MISC"], "url": "https://github.com/psf/requests/pull/6655"}, {"name": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "tags": ["x_refsource_MISC"], "url": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/"}], "affected": [{"vendor": "psf", "product": "requests", "versions": [{"version": "< 2.32.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-06-10T16:09:17.143Z"}, "descriptions": [{"lang": "en", "value": "Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0."}], "source": {"advisory": "GHSA-9wx4-h78v-vm56", "discovery": "UNKNOWN"}}, "adp": [{"affected": [{"vendor": "request_project", "product": "request", "cpes": ["cpe:2.3:a:request_project:request:2.32.0:*:*:*:*:node.js:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "2.32.0", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-07-30T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-35195"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-31T03:56:03.717Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:07:46.774Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56"}, {"name": "https://github.com/psf/requests/pull/6655", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/psf/requests/pull/6655"}, {"name": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/", "tags": ["x_transferred"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56", "name": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/psf/requests/pull/6655", "name": "https://github.com/psf/requests/pull/6655", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "name": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/", "tags": ["x_transferred"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:07:46.774Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-35195", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-21T14:17:58.814431Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:request_project:request:2.32.0:*:*:*:*:node.js:*:*"], "vendor": "request_project", "product": "request", "versions": [{"status": "affected", "version": "0", "lessThan": "2.32.0", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-21T14:19:45.545Z"}}], "cna": {"title": "Requests `Session` object does not verify requests after making first request with verify=False", "source": {"advisory": "GHSA-9wx4-h78v-vm56", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.6, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "psf", "product": "requests", "versions": [{"status": "affected", "version": "< 2.32.0"}]}], "references": [{"url": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56", "name": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/psf/requests/pull/6655", "name": "https://github.com/psf/requests/pull/6655", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "name": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "tags": ["x_refsource_MISC"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/"}], "descriptions": [{"lang": "en", "value": "Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-670", "description": "CWE-670: Always-Incorrect Control Flow Implementation"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-06-10T16:09:17.143Z"}}}, "cveMetadata": {"cveId": "CVE-2024-35195", "state": "PUBLISHED", "dateUpdated": "2025-07-31T03:56:03.717Z", "dateReserved": "2024-05-10T14:24:24.342Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-05-20T20:14:48.206Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "requests", "vendor": "psf", "versions": [{"status": "affected", "version": "< 2.32.0"}]}], "source": "security-advisories@github.com"}, {"affectedData": [{"cpes": ["cpe:2.3:a:request_project:request:2.32.0:*:*:*:*:node.js:*:*"], "defaultStatus": "unknown", "product": "request", "vendor": "request_project", "versions": [{"lessThan": "2.32.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0."}, {"lang": "es", "value": " Requests es una librer\u00eda HTTP. Antes de 2.32.0, al realizar solicitudes a trav\u00e9s de una `Sesi\u00f3n` de Solicitudes, si la primera solicitud se realiza con `verify=False` para deshabilitar la verificaci\u00f3n de certificados, todas las solicitudes posteriores al mismo host continuar\u00e1n ignorando la verificaci\u00f3n de certificados independientemente de los cambios en el valor de \"verificar\". Este comportamiento continuar\u00e1 durante el ciclo de vida de la conexi\u00f3n en el grupo de conexiones. Esta vulnerabilidad se solucion\u00f3 en 2.32.0."}], "id": "CVE-2024-35195", "lastModified": "2026-06-17T07:34:31.230", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 0.3, "impactScore": 5.2, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-35195", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-07-30T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2024-05-20T21:15:09.990", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac"}, {"source": "security-advisories@github.com", "url": "https://github.com/psf/requests/pull/6655"}, {"source": "security-advisories@github.com", "url": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56"}, {"source": "security-advisories@github.com", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/"}, {"source": "security-advisories@github.com", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/psf/requests/pull/6655"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-670"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2024:3781", "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4::el8", "package": "python3x-requests-0:2.32.2-1.el8ap", "product_name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "release_date": "2024-06-10T00:00:00Z"}, {"advisory": "RHSA-2024:4522", "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4::el8", "package": "automation-controller-0:4.5.8-1.el8ap", "product_name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "release_date": "2024-07-12T00:00:00Z"}, {"advisory": "RHSA-2024:3781", "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4::el9", "package": "python-requests-0:2.32.2-1.el9ap", "product_name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "release_date": "2024-06-10T00:00:00Z"}, {"advisory": "RHSA-2024:4522", "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4::el9", "package": "automation-controller-0:4.5.8-1.el9ap", "product_name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "release_date": "2024-07-12T00:00:00Z"}, {"advisory": "RHSA-2025:0012", "cpe": "cpe:/o:redhat:enterprise_linux:8", "package": "python-requests-0:2.20.0-5.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2025-01-02T00:00:00Z"}, {"advisory": "RHSA-2025:7049", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "python-requests-0:2.25.1-9.el9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2025-05-13T00:00:00Z"}, {"advisory": "RHSA-2025:7049", "cpe": "cpe:/o:redhat:enterprise_linux:9", "package": "python-requests-0:2.25.1-9.el9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2025-05-13T00:00:00Z"}, {"advisory": "RHSA-2024:9988", "cpe": "cpe:/a:redhat:openstack:17.1::el8", "package": "python-requests-0:2.25.1-2.el8ost", "product_name": "Red Hat OpenStack Platform 17.1 for RHEL 8", "release_date": "2024-11-21T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "candlepin-0:4.4.21-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "foreman-0:3.12.0.6-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "foreman-installer-1:3.12.0.4-2.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "python-django-0:4.2.19-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "python-jinja2-0:3.1.5-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "python-pulp-cli-0:0.29.2-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "python-pulp-container-0:2.20.5-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "python-pulpcore-0:3.49.33-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "python-pulp-glue-0:0.29.2-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "python-requests-0:2.32.3-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "rubygem-foreman_ansible-0:14.2.3-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "rubygem-foreman_maintain-1:1.7.12-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "rubygem-foreman_openscap-0:9.0.5-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "rubygem-foreman_remote_execution-0:13.2.7-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "rubygem-foreman_theme_satellite-0:13.3.5-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "rubygem-katello-0:4.14.0.8-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "satellite-0:6.16.3-2.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el8", "package": "scap-security-guide-satellite-0:1.0.0-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "candlepin-0:4.4.21-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "foreman-0:3.12.0.6-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "foreman-installer-1:3.12.0.4-2.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "python-django-0:4.2.19-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "python-jinja2-0:3.1.5-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "python-pulp-cli-0:0.29.2-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "python-pulp-container-0:2.20.5-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "python-pulpcore-0:3.49.33-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "python-pulp-glue-0:0.29.2-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "python-requests-0:2.32.3-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "rubygem-foreman_ansible-0:14.2.3-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "rubygem-foreman_maintain-1:1.7.12-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "rubygem-foreman_openscap-0:9.0.5-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "rubygem-foreman_remote_execution-0:13.2.7-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "rubygem-foreman_theme_satellite-0:13.3.5-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "rubygem-katello-0:4.14.0.8-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "satellite-0:6.16.3-2.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8", "package": "scap-security-guide-satellite-0:1.0.0-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "candlepin-0:4.4.21-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "foreman-0:3.12.0.6-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "foreman-installer-1:3.12.0.4-2.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "python-django-0:4.2.19-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "python-jinja2-0:3.1.5-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "python-pulp-cli-0:0.29.2-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "python-pulp-container-0:2.20.5-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "python-pulpcore-0:3.49.33-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "python-pulp-glue-0:0.29.2-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "python-requests-0:2.32.3-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "rubygem-foreman_ansible-0:14.2.3-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "rubygem-foreman_maintain-1:1.7.12-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "rubygem-foreman_openscap-0:9.0.5-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "rubygem-foreman_remote_execution-0:13.2.7-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "rubygem-foreman_theme_satellite-0:13.3.5-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "rubygem-katello-0:4.14.0.8-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "satellite-0:6.16.3-2.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el8", "package": "scap-security-guide-satellite-0:1.0.0-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "candlepin-0:4.4.21-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "foreman-0:3.12.0.6-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "foreman-installer-1:3.12.0.4-2.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "python-django-0:4.2.19-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "python-jinja2-0:3.1.5-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "python-pulp-cli-0:0.29.2-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "python-pulp-container-0:2.20.5-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "python-pulpcore-0:3.49.33-1.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "python-pulp-glue-0:0.29.2-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "python-requests-0:2.32.3-2.el8pc", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "rubygem-foreman_ansible-0:14.2.3-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "rubygem-foreman_maintain-1:1.7.12-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "rubygem-foreman_openscap-0:9.0.5-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "rubygem-foreman_remote_execution-0:13.2.7-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "rubygem-foreman_theme_satellite-0:13.3.5-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "rubygem-katello-0:4.14.0.8-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "satellite-0:6.16.3-2.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el8", "package": "scap-security-guide-satellite-0:1.0.0-1.el8sat", "product_name": "Red Hat Satellite 6.16 for RHEL 8", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "candlepin-0:4.4.21-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "foreman-0:3.12.0.6-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "foreman-installer-1:3.12.0.4-2.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "python-django-0:4.2.19-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "python-jinja2-0:3.1.5-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "python-pulp-cli-0:0.29.2-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "python-pulp-container-0:2.20.5-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "python-pulpcore-0:3.49.33-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "python-pulp-glue-0:0.29.2-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "python-requests-0:2.32.3-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "rubygem-foreman_ansible-0:14.2.3-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "rubygem-foreman_maintain-1:1.7.12-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "rubygem-foreman_openscap-0:9.0.5-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "rubygem-foreman_remote_execution-0:13.2.7-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "rubygem-foreman_theme_satellite-0:13.3.5-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "rubygem-katello-0:4.14.0.8-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "satellite-0:6.16.3-2.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite:6.16::el9", "package": "scap-security-guide-satellite-0:1.0.0-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "candlepin-0:4.4.21-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "foreman-0:3.12.0.6-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "foreman-installer-1:3.12.0.4-2.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "python-django-0:4.2.19-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "python-jinja2-0:3.1.5-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "python-pulp-cli-0:0.29.2-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "python-pulp-container-0:2.20.5-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "python-pulpcore-0:3.49.33-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "python-pulp-glue-0:0.29.2-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "python-requests-0:2.32.3-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "rubygem-foreman_ansible-0:14.2.3-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "rubygem-foreman_maintain-1:1.7.12-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "rubygem-foreman_openscap-0:9.0.5-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "rubygem-foreman_remote_execution-0:13.2.7-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "rubygem-foreman_theme_satellite-0:13.3.5-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "rubygem-katello-0:4.14.0.8-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "satellite-0:6.16.3-2.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9", "package": "scap-security-guide-satellite-0:1.0.0-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "candlepin-0:4.4.21-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "foreman-0:3.12.0.6-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "foreman-installer-1:3.12.0.4-2.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "python-django-0:4.2.19-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "python-jinja2-0:3.1.5-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "python-pulp-cli-0:0.29.2-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "python-pulp-container-0:2.20.5-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "python-pulpcore-0:3.49.33-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "python-pulp-glue-0:0.29.2-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "python-requests-0:2.32.3-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "rubygem-foreman_ansible-0:14.2.3-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "rubygem-foreman_maintain-1:1.7.12-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "rubygem-foreman_openscap-0:9.0.5-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "rubygem-foreman_remote_execution-0:13.2.7-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "rubygem-foreman_theme_satellite-0:13.3.5-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "rubygem-katello-0:4.14.0.8-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "satellite-0:6.16.3-2.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_maintenance:6.16::el9", "package": "scap-security-guide-satellite-0:1.0.0-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "candlepin-0:4.4.21-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "foreman-0:3.12.0.6-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "foreman-installer-1:3.12.0.4-2.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "python-django-0:4.2.19-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "python-jinja2-0:3.1.5-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "python-pulp-cli-0:0.29.2-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "python-pulp-container-0:2.20.5-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "python-pulpcore-0:3.49.33-1.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "python-pulp-glue-0:0.29.2-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "python-requests-0:2.32.3-2.el9pc", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "rubygem-foreman_ansible-0:14.2.3-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "rubygem-foreman_maintain-1:1.7.12-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "rubygem-foreman_openscap-0:9.0.5-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "rubygem-foreman_remote_execution-0:13.2.7-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "rubygem-foreman_theme_satellite-0:13.3.5-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "rubygem-katello-0:4.14.0.8-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "satellite-0:6.16.3-2.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:2399", "cpe": "cpe:/a:redhat:satellite_utils:6.16::el9", "package": "scap-security-guide-satellite-0:1.0.0-1.el9sat", "product_name": "Red Hat Satellite 6.16 for RHEL 9", "release_date": "2025-03-05T00:00:00Z"}, {"advisory": "RHSA-2025:1335", "cpe": "cpe:/a:redhat:rhui:4::el8", "package": "python-requests-0:2.32.3-2.el8ui", "product_name": "RHUI 4 for RHEL 8", "release_date": "2025-02-12T00:00:00Z"}, {"advisory": "RHSA-2025:8385", "cpe": "cpe:/a:redhat:discovery:1.14::el9", "package": "registry.redhat.io/discovery/discovery-ui-rhel9:sha256:492e412759cf0eedfa5b557f7b0865f8864f84d0ed75e11dc8d7a840837d9644", "product_name": "Red Hat Discovery 1.14", "release_date": "2025-06-02T00:00:00Z"}], "bugzilla": {"description": "requests: subsequent requests to the same host ignore cert verification", "id": "2282114", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282114"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.6", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N", "status": "verified"}, "cwe": "CWE-670", "details": ["Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.", "An incorrect control flow implementation vulnerability was found in Requests. If the first request in a session is made with verify=False, all subsequent requests to the same host will continue to ignore cert verification."], "name": "CVE-2024-35195", "package_state": [{"cpe": "cpe:/a:redhat:certifications:1::el8", "fix_state": "Affected", "package_name": "redhat-certification-baremetal-container", "product_name": "Red Hat Certification for Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/a:redhat:certifications:1::el9", "fix_state": "Affected", "package_name": "redhat-certification", "product_name": "Red Hat Certification for Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:rhdh:1", "fix_state": "Not affected", "package_name": "rhdh-operator-container", "product_name": "Red Hat Developer Hub"}, {"cpe": "cpe:/a:redhat:rhdh:1", "fix_state": "Affected", "package_name": "rhdh/rhdh-hub-rhel9", "product_name": "Red Hat Developer Hub"}, {"cpe": "cpe:/a:redhat:discovery:1", "fix_state": "Not affected", "package_name": "discovery-server-container", "product_name": "Red Hat Discovery 1"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "python-pip", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "python-requests", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "python-tornado", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "python-requests", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "pykickstart", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "python-pip", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Will not fix", "package_name": "python-requests", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "resource-agents", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "scap-security-guide", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "gimp:flatpak/python2-pip", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "inkscape:flatpak/python2-pip", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "python27:2.7/python2-pip", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "python27:2.7/python-requests", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "python3.11-pip", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "python3.12-pip", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "python39:3.9/python3x-pip", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "python39:3.9/python-requests", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "python-pip", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "rust-srpm-macros", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "scap-security-guide", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "python3.11-pip", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "python3.12-pip", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "python-pip", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "rust-srpm-macros", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "scap-security-guide", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Out of support scope", "package_name": "openvswitch-ovn-kubernetes", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Out of support scope", "package_name": "python-requests", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift4/baremetal-hardware-event-proxy-rhel8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/quay-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Not affected", "package_name": "rh-python38-python-pip", "product_name": "Red Hat Software Collections"}], "public_date": "2024-05-20T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-35195\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-35195\nhttps://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56"], "statement": "Within regulated environments, a combination of the following controls acts as a significant barrier to successfully exploiting a CWE-670: Always-Incorrect Control Flow Implementation vulnerability and therefore downgrades the severity of this particular CVE from Moderate to Low.\nThe platform's orchestration features, such as liveness and readiness probes, automated pod restarts, and health monitoring, help to quickly detect and recover from service-level failures resulting from incorrect control flows. Static code analysis and peer code review techniques are used to execute robust input validation and error-handling mechanisms to ensure all user inputs are thoroughly validated, preventing improperly validated inputs from causing system instability, exposing sensitive data, or escalating risks. Additionally, process isolation ensures that component issues are contained within the originating process, preventing them from affecting other processes or the system as a whole.", "threat_severity": "Moderate"}

{}