CVE-2025-2157: Foreman: disclosure of executed commands and outputs in foreman / red hat satellite
First published: Mon Mar 10 2025(Updated: )
A flaw was found in Foreman / Red Hat Satellite, where temporary files created under /var/tmp during job execution have improper permissions. This allows low-privileged OS users to access and read command execution outputs, potentially exposing sensitive information such as system credentials or configuration details before the temporary files are deleted.This vulnerability does not grant direct privilege escalation but increases the risk of information disclosure, which could be leveraged in further attacks.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Foreman | ||
| Red Hat Satellite with Embedded Oracle |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2157?
CVE-2025-2157 is classified as a medium severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2025-2157?
To fix CVE-2025-2157, ensure that temporary files created in /var/tmp during job execution have the appropriate permissions set.
Who is affected by CVE-2025-2157?
CVE-2025-2157 affects users of Red Hat Foreman and Red Hat Satellite with Embedded Oracle.
What information can be exposed by CVE-2025-2157?
CVE-2025-2157 can expose sensitive information such as command execution outputs to low-privileged OS users.
When was CVE-2025-2157 reported?
CVE-2025-2157 was reported as a vulnerability affecting specific versions of Foreman and Red Hat Satellite.
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-2157
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/first-publish-date
- agent/description
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/source
- agent/author
- agent/severity
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/foreman
- canonical/red hat satellite with embedded oracle