First published: Mon Mar 10 2025(Updated: )
A flaw was found in Foreman / Red Hat Satellite, where temporary files created under /var/tmp during job execution have improper permissions. This allows low-privileged OS users to access and read command execution outputs, potentially exposing sensitive information such as system credentials or configuration details before the temporary files are deleted.This vulnerability does not grant direct privilege escalation but increases the risk of information disclosure, which could be leveraged in further attacks.
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Satellite |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
REDHAT-BUG-2351092 is considered a moderate severity vulnerability due to improper file permissions leading to potential information exposure.
To fix REDHAT-BUG-2351092, ensure that the file permissions for temporary files created under /var/tmp are appropriately configured to restrict access.
Users of Foreman or Red Hat Satellite are affected by REDHAT-BUG-2351092 due to improper permissions on temporary files.
Due to REDHAT-BUG-2351092, sensitive information such as system credentials could potentially be exposed to low-privileged OS users.
While not the most common, REDHAT-BUG-2351092 is a notable vulnerability that highlights the importance of file permission management in system security.