Advisory Published
Updated

REDHAT-BUG-2351092

First published: Mon Mar 10 2025(Updated: )

A flaw was found in Foreman / Red Hat Satellite, where temporary files created under /var/tmp during job execution have improper permissions. This allows low-privileged OS users to access and read command execution outputs, potentially exposing sensitive information such as system credentials or configuration details before the temporary files are deleted.This vulnerability does not grant direct privilege escalation but increases the risk of information disclosure, which could be leveraged in further attacks.

Affected SoftwareAffected VersionHow to fix
Red Hat Satellite

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of REDHAT-BUG-2351092?

    REDHAT-BUG-2351092 is considered a moderate severity vulnerability due to improper file permissions leading to potential information exposure.

  • How do I fix REDHAT-BUG-2351092?

    To fix REDHAT-BUG-2351092, ensure that the file permissions for temporary files created under /var/tmp are appropriately configured to restrict access.

  • Who is affected by REDHAT-BUG-2351092?

    Users of Foreman or Red Hat Satellite are affected by REDHAT-BUG-2351092 due to improper permissions on temporary files.

  • What kind of information could be exposed due to REDHAT-BUG-2351092?

    Due to REDHAT-BUG-2351092, sensitive information such as system credentials could potentially be exposed to low-privileged OS users.

  • Is REDHAT-BUG-2351092 a common vulnerability?

    While not the most common, REDHAT-BUG-2351092 is a notable vulnerability that highlights the importance of file permission management in system security.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203