CVE-2024-8553 Foreman: read-only access to entire db from templates
Authenticated users with template permissions can bypass restrictions to read any field from the Foreman database via loader macros.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-8553?
CVE-2024-8553 is a medium-severity vulnerability in Red Hat Satellite 6.13 for RHEL 8, published on 31 Oct 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions and access sensitive information.
Weakness: CWE-200
Which versions are affected by CVE-2024-8553?
Linux distribution packages (17)
foreman Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-cli Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-debug Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-dynflow-sidekiq Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-ec2 Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-journald Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-libvirt Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-openstack Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-ovirt Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-postgresql Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-service Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-telemetry Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-vmware Red Hat:satellite:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman Red Hat:satellite_capsule:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-debug Red Hat:satellite_capsule:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman Red Hat:satellite_utils:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
foreman-cli Red Hat:satellite_utils:6.13::el8 | All versions | 0:3.5.1.25-1.el8sat |
How do I fix CVE-2024-8553?
Apply the vendor's patch.
Is CVE-2024-8553 being exploited?
There is no known exploitation of CVE-2024-8553 in the wild and no public exploit code.
Sources
Also known as GHSA-ffc7-h8x5-mm7h, RHSA-2024:8717.