CVE-2022-3874: Os command injection via ct_command and fcct_command
First published: Mon Nov 07 2022(Updated: )
A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.
Credit: secalert@redhat.com secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| rubygems/foreman | <=3.8.0 | |
| Redhat Satellite | =6.0 | |
| Theforeman Foreman |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvd.nist.gov/vuln/detail/CVE-2022-3874
- https://access.redhat.com/security/cve/CVE-2022-3874
- https://bugzilla.redhat.com/show_bug.cgi?id=2140577
- https://github.com/theforeman/foreman/pull/9836
- https://github.com/theforeman/theforeman.org/pull/2101
- https://github.com/advisories/GHSA-9jfq-54vc-9rr2 (Advisory)
Frequently Asked Questions
What is CVE-2022-3874?
CVE-2022-3874 is a command injection vulnerability found in the foreman application.
What is the severity of CVE-2022-3874?
CVE-2022-3874 has a severity rating of 9.1 (critical).
How does CVE-2022-3874 affect Redhat Satellite?
CVE-2022-3874 affects Redhat Satellite 6.0.
How does CVE-2022-3874 affect Theforeman Foreman?
CVE-2022-3874 affects Theforeman Foreman.
How can I fix CVE-2022-3874?
To fix CVE-2022-3874, it is recommended to update to the latest version of the foreman application.
- collector/github-advisory
- alias/GHSA-9jfq-54vc-9rr2
- alias/CVE-2022-3874
- collector/nvd-api
- collector/nvd-index
- collector/github-advisory-latest
- collector/nvd-cve
- agent/weakness
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/title
- agent/severity
- agent/event
- agent/tags
- package-manager/rubygems
- vendor/redhat
- canonical/redhat satellite
- version/redhat satellite/6.0
- vendor/theforeman
- canonical/theforeman foreman