CVE-2025-2157: Foreman: disclosure of executed commands and outputs in foreman / red hat satellite
A flaw was found in Foreman / Red Hat Satellite, where temporary files created under /var/tmp during job execution have improper permissions. This allows low-privileged OS users to access and read command execution outputs, potentially exposing sensitive information such as system credentials or configuration details before the temporary files are deleted.This vulnerability does not grant direct privilege escalation but increases the risk of information disclosure, which could be leveraged in further attacks.
Other sources
A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, exposing sensitive command outputs, such as /etc/shadow. This issue can lead to information disclosure and privilege escalation if exploited effectively.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2157?
CVE-2025-2157 is classified as a medium severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2025-2157?
To fix CVE-2025-2157, ensure that temporary files created in /var/tmp during job execution have the appropriate permissions set.
Who is affected by CVE-2025-2157?
CVE-2025-2157 affects users of Red Hat Foreman and Red Hat Satellite with Embedded Oracle.
What information can be exposed by CVE-2025-2157?
CVE-2025-2157 can expose sensitive information such as command execution outputs to low-privileged OS users.
When was CVE-2025-2157 reported?
CVE-2025-2157 was reported as a vulnerability affecting specific versions of Foreman and Red Hat Satellite.