A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-http-acceptUpgrade rubygem-jwtUpgrade rubygem-snaky_hashUpgrade rubygem-fast_gettextUpgrade rubygem-clampUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-ffi-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-loggingUpgrade foreman-cliUpgrade satellite-brandingUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cliUpgrade rubygem-amazing_printUpgrade rubygem-rest-clientUpgrade rubygem-ffi-debugsourceUpgrade rubygem-oauth-ttyUpgrade satelliteUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade rubygem-localeUpgrade rubygem-netrcUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicodeUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-cliUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-foreman_maintainUpgrade rubygem-multi_jsonUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-cloneUpgrade rubygem-unfUpgrade rubygem-hashieUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-mime-types-dataUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffiUpgrade rubygem-unf_extUpgrade rubygem-mime-typesUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-domain_name | Nov 1, 2023 | Sep 22, 2023 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-little-pluggerUpgrade rubygem-localeUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-gssapiUpgrade rubygem-apipie-bindingsUpgrade rubygem-ffi-debugsourceUpgrade python39-pulp_manifestUpgrade rubygem-http-acceptUpgrade rubygem-multi_jsonUpgrade satellite-brandingUpgrade rubygem-mime-typesUpgrade satelliteUpgrade rubygem-jwtUpgrade rubygem-unf_extUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-snaky_hashUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-fast_gettextUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade rubygem-netrcUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-oauth-ttyUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-highlineUpgrade rubygem-version_gemUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade rubygem-powerbarUpgrade foreman-cliUpgrade rubygem-domain_nameUpgrade satellite-cloneUpgrade satellite-maintainUpgrade rubygem-clampUpgrade satellite-cliUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-display_widthUpgrade rubygem-foreman_maintainUpgrade rubygem-http-cookie | Nov 1, 2023 | Sep 22, 2023 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxx | Mar 5, 2024 | Sep 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub