CVE-2024-8553: Foreman: read-only access to entire db from templates
First published: Mon Sep 16 2024(Updated: )
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions and access sensitive information.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| The Foreman |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2024:8717
- https://access.redhat.com/errata/RHSA-2024:8718
- https://access.redhat.com/errata/RHSA-2024:8719
- https://access.redhat.com/security/cve/CVE-2024-8553
- https://bugzilla.redhat.com/show_bug.cgi?id=2312524
- https://github.com/theforeman/foreman/blob/da504c8a2599b325853066b5099493e0c
- https://access.redhat.com/errata/RHSA-2024:8906
Frequently Asked Questions
What is the severity of CVE-2024-8553?
CVE-2024-8553 has a high severity as it allows authenticated users to read sensitive data from Foreman's database.
What products are affected by CVE-2024-8553?
CVE-2024-8553 affects The Foreman software that utilizes loader macros in report templates.
How do I fix CVE-2024-8553?
To fix CVE-2024-8553, update The Foreman to the latest version that addresses this vulnerability.
Who is impacted by CVE-2024-8553?
Authenticated users with permissions to view and create templates may be impacted by CVE-2024-8553.
What kind of attack can CVE-2024-8553 enable?
CVE-2024-8553 can enable an attacker to exploit loader macros to access unauthorized fields in the Foreman database.
- agent/title
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/description
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/references
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-8553
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/the foreman
- canonical/the foreman