A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-unfUpgrade rubygem-hashieUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-apipie-bindingsUpgrade satellite-cliUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_googleUpgrade python39-pulp_manifestUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffiUpgrade rubygem-mime-typesUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-mime-types-dataUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-multi_jsonUpgrade rubygem-version_gemUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-netrcUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-little-pluggerUpgrade rubygem-snaky_hashUpgrade rubygem-rest-clientUpgrade rubygem-unicode-debuginfoUpgrade rubygem-gssapiUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-brandingUpgrade rubygem-unicode-debugsourceUpgrade rubygem-ffi-debugsourceUpgrade rubygem-localeUpgrade rubygem-loggingUpgrade foreman-cliUpgrade rubygem-fast_gettextUpgrade rubygem-clampUpgrade rubygem-hammer_cli_katelloUpgrade satelliteUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-oauthUpgrade rubygem-jwtUpgrade rubygem-http-accept | Nov 1, 2023 | Sep 22, 2023 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-netrcUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-display_widthUpgrade rubygem-version_gemUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-highlineUpgrade rubygem-powerbarUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-domain_nameUpgrade satellite-cloneUpgrade rubygem-ffiUpgrade rubygem-rest-clientUpgrade foreman-cliUpgrade rubygem-unfUpgrade satellite-maintainUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-http-cookieUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hashieUpgrade rubygem-foreman_maintainUpgrade rubygem-snaky_hashUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-jwtUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicodeUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-fast_gettextUpgrade python39-pulp_manifestUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-loggingUpgrade rubygem-localeUpgrade rubygem-multi_jsonUpgrade rubygem-http-acceptUpgrade rubygem-gssapiUpgrade rubygem-ffi-debugsourceUpgrade satelliteUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-brandingUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-amazing_printUpgrade rubygem-apipie-bindings | Nov 1, 2023 | Sep 22, 2023 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsource | Mar 5, 2024 | Sep 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub