REDHAT-BUG-2351092: Low severity red hat satellite vulnerability
A flaw was found in Foreman / Red Hat Satellite, where temporary files created under /var/tmp during job execution have improper permissions. This allows low-privileged OS users to access and read command execution outputs, potentially exposing sensitive information such as system credentials or configuration details before the temporary files are deleted.This vulnerability does not grant direct privilege escalation but increases the risk of information disclosure, which could be leveraged in further attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2351092?
REDHAT-BUG-2351092 is considered a moderate severity vulnerability due to improper file permissions leading to potential information exposure.
How do I fix REDHAT-BUG-2351092?
To fix REDHAT-BUG-2351092, ensure that the file permissions for temporary files created under /var/tmp are appropriately configured to restrict access.
Who is affected by REDHAT-BUG-2351092?
Users of Foreman or Red Hat Satellite are affected by REDHAT-BUG-2351092 due to improper permissions on temporary files.
What kind of information could be exposed due to REDHAT-BUG-2351092?
Due to REDHAT-BUG-2351092, sensitive information such as system credentials could potentially be exposed to low-privileged OS users.
Is REDHAT-BUG-2351092 a common vulnerability?
While not the most common, REDHAT-BUG-2351092 is a notable vulnerability that highlights the importance of file permission management in system security.