NetSight
IP …
high7.8

CVE-2023-3899

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization.

Impact

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.

Affected products

VendorProductAffected versions
RedhatSubscription-Manager
before 1.28.39
from 1.29.0 before 1.29.37
FedoraprojectFedora
Versions 37, 38
RedhatEnterprise Linux
Versions 8.0, 9.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 8.6, 8.8, 9.0, 9.2
RedhatEnterprise Linux For Arm 64
Versions 8.0, 9.0, 9.2
RedhatEnterprise Linux For Arm 64 Eus
Versions 8.6, 8.8, 9.0, 9.2
RedhatEnterprise Linux For Ibm Z Systems
Versions 7.0, 8.0, 9.0, 9.2
RedhatEnterprise Linux For Ibm Z Systems Eus
Versions 8.6, 8.8, 9.0, 9.2
RedhatEnterprise Linux For Power Big Endian
Version 7.0
RedhatEnterprise Linux For Power Little Endian
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux For Power Little Endian Eus
Versions 8.8, 9.0, 9.2

Weakness classification

CWE-285CWE-863

References