Name: CVE-2022-3874: Improper Neutralization of Special Elements used in an OS Command
Creator: Rapid7
Published: 2023-09-22T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-3874, CWE-78, CVSS 8, EPSS 0.00178

A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.

CVSS Details

CVSS 3.1 Base Score: 8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-ffi-debuginfoUpgrade rubygem-clampUpgrade rubygem-loggingUpgrade rubygem-snaky_hashUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cliUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-highlineUpgrade rubygem-localeUpgrade satellite-brandingUpgrade rubygem-little-pluggerUpgrade rubygem-oauthUpgrade rubygem-unicode-debugsourceUpgrade rubygem-oauth-ttyUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade satelliteUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-http-acceptUpgrade rubygem-jwtUpgrade rubygem-fast_gettextUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-netrcUpgrade rubygem-unfUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-ffiUpgrade satellite-cloneUpgrade rubygem-apipie-bindingsUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-typesUpgrade rubygem-http-cookieUpgrade rubygem-multi_jsonUpgrade satellite-cliUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-foreman_maintainUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-maintainUpgrade rubygem-unicode-display_widthUpgrade rubygem-hashieUpgrade rubygem-powerbarUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_bootdisk	Nov 1, 2023	Sep 22, 2023
Redhat_linux	—	Upgrade rubygem-ffi-debugsourceUpgrade satelliteUpgrade rubygem-gssapiUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-unicode-debugsourceUpgrade rubygem-jwtUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-fast_gettextUpgrade satellite-brandingUpgrade rubygem-unicodeUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-multi_jsonUpgrade rubygem-amazing_printUpgrade python39-pulp_manifestUpgrade rubygem-little-pluggerUpgrade rubygem-localeUpgrade rubygem-domain_nameUpgrade satellite-cloneUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-mime-types-dataUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade foreman-cliUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-rest-clientUpgrade satellite-cliUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffiUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-oauthUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicode-display_widthUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unfUpgrade rubygem-oauth-ttyUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-netrc	Nov 1, 2023	Sep 22, 2023
Rocky_linux	—	Upgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsource	Mar 5, 2024	Sep 22, 2023

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence