Foreman: os command injection via ct_location and fcct_location parameters
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| The Foreman | Foreman | unaffected |
|
||||||
| Red Hat | Red Hat Satellite 6.15 for RHEL 8 | affected |
|
||||||
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 | affected |
|
||||||
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 | affected |
|
||||||
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | affected |
|
||||||
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | affected |
|
||||||
| Red Hat | Red Hat Satellite 6 | affected | — |
No data.
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Satellite 6.18 for RHEL 9 | |||
| foreman-0:3.16.0.4-1.el9sat | cpe:/a:redhat:satellite_utils:6.18::el9 | RHSA-2025:19721 | 2025-11-04T00:00:00Z |
No data available yet.
Vendor Workaround
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.728% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:satellite:6.15::el8 cpe:/a:redhat:satellite:6.16::el8 cpe:/a:redhat:satellite:6.16::el9 cpe:/a:redhat:satellite:6.17::el9 cpe:/a:redhat:satellite_capsule:6.15::el8 cpe:/a:redhat:satellite_capsule:6.16::el8 cpe:/a:redhat:satellite_capsule:6.16::el9 cpe:/a:redhat:satellite_capsule:6.17::el9 cpe:/a:redhat:satellite_maintenance:6.17::el9 cpe:/a:redhat:satellite_utils:6.15::el8 cpe:/a:redhat:satellite_utils:6.16::el8 cpe:/a:redhat:satellite_utils:6.16::el9 cpe:/a:redhat:satellite_utils:6.17::el9 |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-78 | |
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting. | |
| Title | Foreman: os command injection via ct_location and fcct_location parameters | |
| First Time appeared |
Redhat
Redhat satellite Redhat satellite Capsule Redhat satellite Maintenance Redhat satellite Utils |
|
| Weaknesses | CWE-602 | |
| CPEs | cpe:/a:redhat:satellite:6 cpe:/a:redhat:satellite:6.18::el9 cpe:/a:redhat:satellite_capsule:6.18::el9 cpe:/a:redhat:satellite_maintenance:6.18::el9 cpe:/a:redhat:satellite_utils:6.18::el9 |
|
| Vendors & Products |
Redhat
Redhat satellite Redhat satellite Capsule Redhat satellite Maintenance Redhat satellite Utils |
|
| References |
| |
| Metrics |
cvssV3_1
|