Description (CNA)
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected |
| Red Hat / Red Hat Satellite 6.11 for RHEL 7 | unaffected 0:3.1.1.27-1.el7sat before * |
| Red Hat / Red Hat Satellite 6.11 for RHEL 7 | unaffected 0:3.1.1.27-1.el7sat before * |
| Red Hat / Red Hat Satellite 6.11 for RHEL 8 | unaffected 0:3.1.1.27-1.el8sat before * |
| Red Hat / Red Hat Satellite 6.11 for RHEL 8 | unaffected 0:3.1.1.27-1.el8sat before * |
| Red Hat / Red Hat Satellite 6.12 for RHEL 8 | unaffected 0:1.3.8-1.el8sat before * |
| Red Hat / Red Hat Satellite 6.13 for RHEL 8 | unaffected 0:1.3.8-1.el8sat before * |
| Red Hat / Red Hat Satellite 6.14 for RHEL 8 | unaffected 0:3.7.0.9-1.el8sat before * |
| Red Hat / Red Hat Satellite 6.14 for RHEL 8 | unaffected 0:3.7.0.9-1.el8sat before * |
CWE
CWE-78
References
- https://access.redhat.com/errata/RHSA-2023:4466
- https://access.redhat.com/errata/RHSA-2023:5979
- https://access.redhat.com/errata/RHSA-2023:5980
- https://access.redhat.com/errata/RHSA-2023:6818
- https://access.redhat.com/security/cve/CVE-2023-0118
- https://bugzilla.redhat.com/show_bug.cgi?id=2159291
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.