RCE in Theforeman Foreman
CVE-2021-3584
A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability of system. Fixed releases are 2.4.1, 2.5.1, 3.0.0.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.039 (89.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Theforeman Foreman — versions 3.0.0
- Redhat Satellite — versions 6.0
- N/a Foreman — versions foreman 2.4.1, foreman 2.5.1, foreman 3.0.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (Patch, x_refsource_MISC, Issue Tracking, Vendor Advisory)
- secalert@redhat.com (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)
- secalert@redhat.com (Third Party Advisory, x_refsource_MISC, Issue Tracking)
Frequently asked questions
- What is CVE-2021-3584?
- CVE-2021-3584 is a high-severity vulnerability in Theforeman Foreman, classified under OS Command Injection. CVSS score: 7.2/10. Published 2021-12-23.
- How severe is CVE-2021-3584?
- High severity. CVSS v3 base score is 7.2 out of 10.
- Is CVE-2021-3584 known to be exploited?
- 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.