CVE-2024-4871: Foreman: host ssh key not being checked in remote execution
First published: Thu May 02 2024(Updated: )
A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker's ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Satellite with Embedded Oracle |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-4871?
CVE-2024-4871 is classified as a high severity vulnerability due to the potential for man-in-the-middle (MITM) attacks.
How do I fix CVE-2024-4871?
To mitigate CVE-2024-4871, ensure you configure SSH to verify host keys by disabling the '-o StrictHostKeyChecking=no' option.
What systems are affected by CVE-2024-4871?
CVE-2024-4871 affects Red Hat Satellite configured to run remote execution jobs.
What are the risks associated with CVE-2024-4871?
The primary risk of CVE-2024-4871 is that it allows an attacker to perform a man-in-the-middle attack when SSH keys are not verified.
When was CVE-2024-4871 disclosed?
CVE-2024-4871 was disclosed in 2024, detailing vulnerabilities in the Red Hat Satellite remote execution functionality.
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-4871
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/references
- collector/nvd-api
- source/NVD
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat satellite with embedded oracle