REDHAT-BUG-2317450: High severity the foreman vulnerability
A flaw was found in foreman before version 3.3. The server exposes a GraphQL API with limited access. If introspection is enabled (usually by default), it allow attackers to query a settings type without any authentication and retrieve the product settings, including the OAuth consumerkey and OAuth consumersecret properties. These elements can be used to authenticate as foremanapiadmin and gain full control of the product's REST API.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2317450?
The severity of REDHAT-BUG-2317450 is classified as a significant security vulnerability due to unauthorized data exposure.
How do I fix REDHAT-BUG-2317450?
To fix REDHAT-BUG-2317450, ensure that introspection is disabled in the GraphQL API settings or upgrade to Foreman version 3.3 or later.
What products are affected by REDHAT-BUG-2317450?
The affected product for REDHAT-BUG-2317450 is Foreman versions prior to 3.3.
What type of information can be exposed by REDHAT-BUG-2317450?
REDHAT-BUG-2317450 can expose sensitive product settings, including the OAuth consumer_key and OAuth tokens.
Is introspection enabled by default in the affected software for REDHAT-BUG-2317450?
Yes, introspection is usually enabled by default in the GraphQL API of the affected Foreman version.