8.0
High
CVE-2022-3874 A command injection flaw was found in foreman
Description
A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| foreman | Versions not published | |
| Red Hat Satellite 6 | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2140577 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of foreman
The 8 CVEs of foreman →
CVE-2023-0462
An arbitrary code execution flaw was found in Foreman
8.0
High
CVE-2021-20260
A flaw was found in the Foreman project
Not rated
CVE-2021-3590
A flaw was found in Foreman project
Not rated
CVE-2021-3584
A server side remote code execution vulnerability was found in Foreman project
Not rated