Record status Published
Identifier year (not publication year) 2023
Source publication Sep 20, 2023
Source updated Sep 17, 2024
Imported by cveboard Oct 24, 2026
CNA source text (English) Foreman: arbitrary code execution through templates
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
foreman
Vendor Unknown
Product Unknown
Platforms Unknown
Default status affected
Package foreman
Package collection https://github.com/theforeman/foreman
No explicit version tuples; consult this entry's default status.
Red Hat Satellite 6.11 for RHEL 7
Vendor Red Hat
Product Red Hat Satellite 6.11 for RHEL 7
Platforms Unknown
Default status affected
Package foreman
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.11 for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:3.1.1.27-1.el7sat unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.11 for RHEL 7
Vendor Red Hat
Product Red Hat Satellite 6.11 for RHEL 7
Platforms Unknown
Default status affected
Package foreman
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.11 for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:3.1.1.27-1.el7sat unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.11 for RHEL 8
Vendor Red Hat
Product Red Hat Satellite 6.11 for RHEL 8
Platforms Unknown
Default status affected
Package foreman
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.11 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:3.1.1.27-1.el8sat unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.11 for RHEL 8
Vendor Red Hat
Product Red Hat Satellite 6.11 for RHEL 8
Platforms Unknown
Default status affected
Package foreman
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.11 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:3.1.1.27-1.el8sat unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.12 for RHEL 8
Vendor Red Hat
Product Red Hat Satellite 6.12 for RHEL 8
Platforms Unknown
Default status affected
Package rubygem-safemode
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.12 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.3.8-1.el8sat unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.13 for RHEL 8
Vendor Red Hat
Product Red Hat Satellite 6.13 for RHEL 8
Platforms Unknown
Default status affected
Package rubygem-safemode
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.13 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.3.8-1.el8sat unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.14 for RHEL 8
Vendor Red Hat
Product Red Hat Satellite 6.14 for RHEL 8
Platforms Unknown
Default status affected
Package foreman
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.14 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:3.7.0.9-1.el8sat unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.14 for RHEL 8
Vendor Red Hat
Product Red Hat Satellite 6.14 for RHEL 8
Platforms Unknown
Default status affected
Package foreman
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.14 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:3.7.0.9-1.el8sat unaffectedrpm * Unavailable None listed