7.8
High
CVE-2023-3899 A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization
Description
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.2 Telecommunications Update Service | Versions not published | |
| Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | Versions not published | |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | Versions not published |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8.6 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published |
References
- RHSA-2023:4701 access.redhat.com
- RHSA-2023:4702 access.redhat.com
- RHSA-2023:4703 access.redhat.com
- RHSA-2023:4704 access.redhat.com
- RHSA-2023:4705 access.redhat.com
- RHSA-2023:4706 access.redhat.com
- RHSA-2023:4707 access.redhat.com
- RHSA-2023:4708 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2225407 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Enterprise Linux 7
The 1501 CVEs of Red Hat Enterprise Linux 7 →
CVE-2026-123151
Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
Not rated
CVE-2026-121997
Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch
8.1
High
CVE-2026-121996
Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
8.2
High
CVE-2026-121995
Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail
7.5
High