critical9.1
CVE-2023-0118
An arbitrary code execution flaw was found in Foreman.
Impact
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Theforeman | Foreman | All versions |
| Redhat | Satellite | from 6.13 before 6.13.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2023:4466
- https://access.redhat.com/errata/RHSA-2023:5979
- https://access.redhat.com/errata/RHSA-2023:5980
- https://access.redhat.com/errata/RHSA-2023:6818
- https://access.redhat.com/security/cve/CVE-2023-0118
- https://bugzilla.redhat.com/show_bug.cgi?id=2159291
- https://access.redhat.com/errata/RHSA-2023:4466
- https://access.redhat.com/errata/RHSA-2023:5979
- https://access.redhat.com/errata/RHSA-2023:5980
- https://access.redhat.com/errata/RHSA-2023:6818
- https://access.redhat.com/security/cve/CVE-2023-0118
- https://bugzilla.redhat.com/show_bug.cgi?id=2159291