CVE-2018-14643 smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature
Attackers can bypass authentication in Foreman's smart_proxy_dynflow to execute arbitrary commands with high privileges on managed machines.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-14643?
CVE-2018-14643 is a critical authentication bypass vulnerability in Theforeman Foreman, published on 21 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remotely execute arbitrary commands on machines managed by vulnerable Foreman instances, in a highly privileged context.
Which versions are affected by CVE-2018-14643?
4 open source packages ship an affected version, including smart_proxy_dynflow. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
smart_proxy_dynflow RubyGems | All versions | 0.1.11 |
smart_proxy_dynflow RubyGems | All versions | 0.1.11 |
smart_proxy_dynflow RubyGems | From 0.2.0 | 0.2.1 |
smart_proxy_dynflow RubyGems | From 0.2.0 | 0.2.1 |
Linux distribution packages (2)
rubygem-smart_proxy_dynflow Red Hat:satellite:6.3::el7 | All versions | 0:0.1.10.2-1.el7sat |
rubygem-smart_proxy_dynflow Red Hat:satellite_capsule:6.3::el7 | All versions | 0:0.1.10.2-1.el7sat |
Products include Theforeman Foreman.
How do I fix CVE-2018-14643?
Upgrade smart_proxy_dynflow to a fixed version for your release line: 0.1.11 or 0.2.1.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2018-14643 being exploited?
There is no known exploitation of CVE-2018-14643 in the wild and no public exploit code.
Other vulnerabilities in Theforeman Foreman
Sources
Also known as GHSA-gx5g-xcxj-cx2w, RHSA-2018:2733.