9.1
Critical
CVE-2023-0118 An arbitrary code execution flaw was found in Foreman
Description
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Satellite 6.11 for RHEL 7 | Versions not published | |
| Red Hat Satellite 6.11 for RHEL 8 | Versions not published | |
| Red Hat Satellite 6.12 for RHEL 8 | Versions not published | |
| Red Hat Satellite 6.13 for RHEL 8 | Versions not published | |
| Red Hat Satellite 6.14 for RHEL 8 | Versions not published |
References
- RHSA-2023:4466 access.redhat.com
- RHSA-2023:5979 access.redhat.com
- RHSA-2023:5980 access.redhat.com
- RHSA-2023:6818 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2159291 bugzilla.redhat.com
Timeline
- Published
- Last modified