Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0118

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.

Published

2023-09-20T14:15:12.827

Last Modified

2024-11-21T07:36:35.247

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.1 (CRITICAL)

Weaknesses

Type: Secondary
CWE-78
Type: Primary
CWE-78

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	theforeman	foreman	*	Yes
Application	redhat	satellite	< 6.13.3	Yes
Operating System	redhat	enterprise_linux	8.0	No

References

https://access.redhat.com/errata/RHSA-2023:4466 Release Notes, Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2023:5979 ([email protected])
https://access.redhat.com/errata/RHSA-2023:5980 ([email protected])
https://access.redhat.com/errata/RHSA-2023:6818 ([email protected])
https://access.redhat.com/security/cve/CVE-2023-0118 Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2159291 Issue Tracking, Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2023:4466 Release Notes, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2023:5979 (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2023:5980 (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2023:6818 (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/security/cve/CVE-2023-0118 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2159291 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)