It was found that an authenticated user can leverage the SELECT query condition to extract information regarding existence of various values in the database.
Name: Martin Povolny (Red Hat)
This issue has been addressed in the following products:
Red Hat Satellite 6.4 for RHEL 7
Via RHSA-2018:2927 https://access.redhat.com/errata/RHSA-2018:2927