A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-gssapiUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-oauth-ttyUpgrade satelliteUpgrade rubygem-ffi-debugsourceUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-little-pluggerUpgrade rubygem-amazing_printUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_tasksUpgrade satellite-brandingUpgrade rubygem-jwtUpgrade foreman-cliUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-fast_gettextUpgrade rubygem-highlineUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-localeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-clampUpgrade rubygem-http-acceptUpgrade rubygem-domain_nameUpgrade rubygem-mime-types-dataUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffiUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hashieUpgrade rubygem-unicode-display_widthUpgrade satellite-maintainUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_googleUpgrade satellite-cliUpgrade rubygem-multi_jsonUpgrade rubygem-foreman_maintainUpgrade satellite-cloneUpgrade rubygem-apipie-bindingsUpgrade rubygem-unfUpgrade rubygem-unf_ext-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-version_gem | Nov 1, 2023 | Sep 22, 2023 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foremanUpgrade rubygem-oauth-ttyUpgrade rubygem-unfUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-netrcUpgrade rubygem-hashieUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-domain_nameUpgrade rubygem-rest-clientUpgrade foreman-cliUpgrade rubygem-powerbarUpgrade satellite-cloneUpgrade satellite-cliUpgrade rubygem-http-cookieUpgrade rubygem-foreman_maintainUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-highlineUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-oauthUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-http-acceptUpgrade rubygem-multi_jsonUpgrade python39-pulp_manifestUpgrade rubygem-amazing_printUpgrade rubygem-little-pluggerUpgrade rubygem-localeUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-snaky_hashUpgrade rubygem-unicode-debuginfoUpgrade rubygem-mime-typesUpgrade satelliteUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-brandingUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cliUpgrade rubygem-gssapiUpgrade rubygem-jwtUpgrade rubygem-unf_extUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debugsourceUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_discovery | Nov 1, 2023 | Sep 22, 2023 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-utils-debuginfo | Mar 5, 2024 | Sep 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub