Name: CVE-2022-3874: Improper Neutralization of Special Elements used in an OS Command
Creator: Rapid7
Published: 2023-09-22T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-3874, CWE-78, CVSS 8, EPSS 0.00178

A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.

CVSS Details

CVSS 3.1 Base Score: 8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade rubygem-powerbarUpgrade rubygem-version_gemUpgrade satellite-cliUpgrade rubygem-foreman_maintainUpgrade rubygem-multi_jsonUpgrade rubygem-domain_nameUpgrade satellite-maintainUpgrade rubygem-netrcUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unfUpgrade rubygem-apipie-bindingsUpgrade satellite-cloneUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-mime-typesUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_extUpgrade rubygem-mime-types-dataUpgrade rubygem-ffiUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-oauthUpgrade rubygem-rest-clientUpgrade satellite-brandingUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satelliteUpgrade rubygem-localeUpgrade rubygem-highlineUpgrade foreman-cliUpgrade rubygem-hammer_cliUpgrade rubygem-oauth-ttyUpgrade rubygem-loggingUpgrade rubygem-amazing_printUpgrade rubygem-fast_gettextUpgrade rubygem-snaky_hashUpgrade rubygem-jwtUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi-debuginfoUpgrade rubygem-clampUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-ffi-debugsource	Nov 1, 2023	Sep 22, 2023
Redhat_linux	—	Upgrade rubygem-highlineUpgrade rubygem-oauthUpgrade rubygem-foreman_maintainUpgrade rubygem-hashieUpgrade satellite-cliUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade foreman-cliUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-mime-types-dataUpgrade rubygem-version_gemUpgrade rubygem-unfUpgrade rubygem-powerbarUpgrade satellite-cloneUpgrade rubygem-domain_nameUpgrade rubygem-http-cookieUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-netrcUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satelliteUpgrade rubygem-gssapiUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debuginfoUpgrade rubygem-amazing_printUpgrade python39-pulp_manifestUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_extUpgrade rubygem-mime-typesUpgrade rubygem-http-acceptUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-multi_jsonUpgrade rubygem-jwtUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-brandingUpgrade rubygem-loggingUpgrade rubygem-snaky_hash	Nov 1, 2023	Sep 22, 2023
Rocky_linux	—	Upgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsource	Mar 5, 2024	Sep 22, 2023

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence