title: Satellite: arithmetic overflow in satellite
description: An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity.
problem types: Insufficient Session Expiration
affected:
{
product: satellite
vendor: n/a
versions:
version: 6.13, status: unaffected
}
{
vendor: Red Hat
product: Red Hat Satellite 6
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: Security
defaultStatus: affected
cpes: cpe:/a:redhat:satellite:6
}
metrics:
other: [
content: {'value': 'Moderate', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]