A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-subscription-manager-rhsmUpgrade python3-cloud-whatUpgrade subscription-manager-migrationUpgrade dnf-plugin-subscription-managerUpgrade subscription-manager-rhsm-certificatesUpgrade subscription-manager-plugin-ostreeUpgrade libdnf-plugin-subscription-managerUpgrade subscription-managerUpgrade python3-syspurpose | Aug 24, 2023 | Aug 22, 2023 |
| Centos_linux | — | Upgrade subscription-manager-initial-setup-addonUpgrade subscription-manager-plugin-containerUpgrade subscription-manager-guiUpgrade subscription-manager-rhsm-certificatesUpgrade subscription-manager-cockpitUpgrade subscription-manager-debuginfoUpgrade subscription-manager-rhsmUpgrade subscription-managerUpgrade rhsm-gtkUpgrade python-syspurposeUpgrade subscription-manager-plugin-ostreeUpgrade subscription-manager-migration | Aug 29, 2023 | Aug 23, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade dnf-plugin-subscription-managerUpgrade subscription-managerUpgrade subscription-manager-plugin-containerUpgrade python3-syspurposeUpgrade subscription-manager-rhsm-certificatesUpgrade subscription-manager-plugin-ostreeUpgrade subscription-manager-cockpitUpgrade python2-subscription-manager-rhsmUpgrade python3-subscription-manager-rhsm | Mar 13, 2024 | Aug 23, 2023 |
| Redhat_linux | — | Upgrade subscription-manager-initial-setup-addonUpgrade subscription-manager-debugsourceUpgrade python3-syspurposeUpgrade libdnf-plugin-subscription-manager-debuginfoUpgrade python3-subscription-manager-rhsmUpgrade subscription-manager-migrationUpgrade subscription-manager-cockpitUpgrade rhsm-gtkUpgrade subscription-manager-debuginfoUpgrade subscription-manager-guiUpgrade subscription-managerUpgrade python3-subscription-manager-rhsm-debuginfoUpgrade python3-cloud-whatUpgrade python-syspurposeUpgrade dnf-plugin-subscription-manager-debuginfoUpgrade subscription-manager-rhsmUpgrade subscription-manager-rhsm-certificatesUpgrade subscription-manager-plugin-containerUpgrade rhsm-iconsUpgrade dnf-plugin-subscription-managerUpgrade libdnf-plugin-subscription-managerUpgrade subscription-manager-plugin-ostree | Aug 29, 2023 | Aug 23, 2023 |
| Rocky_linux | — | Upgrade subscription-manager-debuginfoUpgrade subscription-manager-plugin-ostreeUpgrade dnf-plugin-subscription-managerUpgrade subscription-managerUpgrade subscription-manager-debugsourceUpgrade libdnf-plugin-subscription-manager-debuginfoUpgrade python3-syspurposeUpgrade python3-cloud-whatUpgrade python3-subscription-manager-rhsm-debuginfoUpgrade libdnf-plugin-subscription-managerUpgrade python3-subscription-manager-rhsmUpgrade subscription-manager-migrationUpgrade dnf-plugin-subscription-manager-debuginfoUpgrade subscription-manager-rhsm-certificates | Mar 5, 2024 | Aug 23, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub