A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade satellite-brandingUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-clampUpgrade rubygem-snaky_hashUpgrade rubygem-loggingUpgrade rubygem-gssapiUpgrade rubygem-ffi-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cliUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-jwtUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-fast_gettextUpgrade rubygem-little-pluggerUpgrade satelliteUpgrade rubygem-localeUpgrade rubygem-oauthUpgrade rubygem-oauth-ttyUpgrade rubygem-highlineUpgrade foreman-cliUpgrade rubygem-amazing_printUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicodeUpgrade rubygem-hashieUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-powerbarUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foremanUpgrade python39-pulp_manifestUpgrade satellite-maintainUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-mime-types-dataUpgrade satellite-cliUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-netrcUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade satellite-clone | Nov 1, 2023 | Sep 22, 2023 |
| Redhat_linux | — | Upgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unicode-debuginfoUpgrade rubygem-apipie-bindingsUpgrade rubygem-amazing_printUpgrade rubygem-http-acceptUpgrade rubygem-unicodeUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cliUpgrade rubygem-loggingUpgrade rubygem-mime-typesUpgrade satelliteUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-localeUpgrade rubygem-fast_gettextUpgrade rubygem-little-pluggerUpgrade satellite-brandingUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unf_extUpgrade rubygem-unicode-debugsourceUpgrade rubygem-ffi-debuginfoUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-ffi-debugsourceUpgrade rubygem-oauth-ttyUpgrade satellite-maintainUpgrade foreman-cliUpgrade rubygem-version_gemUpgrade rubygem-mime-types-dataUpgrade satellite-cliUpgrade rubygem-clampUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-rest-clientUpgrade rubygem-netrcUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-http-cookieUpgrade rubygem-foreman_maintainUpgrade rubygem-powerbarUpgrade rubygem-unicode-display_widthUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-highlineUpgrade rubygem-oauthUpgrade rubygem-hashieUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-cloneUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_tasks | Nov 1, 2023 | Sep 22, 2023 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxx | Mar 5, 2024 | Sep 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub