Description of problem:

As per documentation:

• https://access.redhat.com/documentation/en-us/red_hat_satellite/6.2/pdf/architecture_guide/Red_Hat_Satellite-6.2-Architecture_Guide-en-US.pdf

• On page 16 it is stated in the diagram that the Satellite's Foreman module provides the bootdisk via tcp/80 to the Capsule's Pulp module (Or directly to hosts). Where bootdisks contain network sensitive information.

If satellite/capsule/host(s) will be on public network then information can be leaked - MITM (Man in the middle attack).