CVE-2023-0118

Опубликовано: 20 сент. 2023

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.

Ссылки

https://access.redhat.com/errata/RHSA-2023:4466
Release Notes
Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:5979
https://access.redhat.com/errata/RHSA-2023:5980
https://access.redhat.com/errata/RHSA-2023:6818
https://access.redhat.com/security/cve/CVE-2023-0118
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2159291
Issue Tracking
Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:4466
Release Notes
Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:5979
https://access.redhat.com/errata/RHSA-2023:5980
https://access.redhat.com/errata/RHSA-2023:6818
https://access.redhat.com/security/cve/CVE-2023-0118
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2159291
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.13.3 (исключая)

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 10%

0.00035

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVE-2023-0118

CVSS3: 9.1

redhat

почти 3 года назад

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.

CVE-2023-0118

CVSS3: 9.1

debian

больше 2 лет назад

An arbitrary code execution flaw was found in Foreman. This flaw allow ...

GHSA-pwc8-3cc6-gg8v

CVSS3: 8

github

больше 2 лет назад

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.

EPSS

Процентиль: 10%

0.00035

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-78