CVE-2024-8553: Foreman: read-only access to entire db from templates
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions and access sensitive information.
Other sources
An issue in templates related to loader macros which were introduced together with report templates. These allow an authenticated user having permission to view any of the resources which have loader macros and permissions to view and create (probably) any kind of templates that allows this user to read any field from Foreman's database by passing in strings to the loader macros and remapping fields from the result to the original object class.
Refer: https://github.com/theforeman/foreman/blob/da504c8a2599b325853066b5099493e0c
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8553?
CVE-2024-8553 has a high severity as it allows authenticated users to read sensitive data from Foreman's database.
What products are affected by CVE-2024-8553?
CVE-2024-8553 affects The Foreman software that utilizes loader macros in report templates.
How do I fix CVE-2024-8553?
To fix CVE-2024-8553, update The Foreman to the latest version that addresses this vulnerability.
Who is impacted by CVE-2024-8553?
Authenticated users with permissions to view and create templates may be impacted by CVE-2024-8553.
What kind of attack can CVE-2024-8553 enable?
CVE-2024-8553 can enable an attacker to exploit loader macros to access unauthorized fields in the Foreman database.