CVE-2019-3845

CVE-2019-3845 describes an access control vulnerability in the QPID broker message queues used by katello-agent in Red Hat Satellite versions prior to 6.2, and Satellite/Capsule 6.1. A low-privileged, authenticated attacker on a registered host could exploit this flaw to access QMF methods on other registered hosts, enabling the execution of privileged commands. This vulnerability carries a CVSSv3 score of 8.0 (High), indicating a high impact on confidentiality, integrity, and availability with low attack complexity and requiring network access. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.