SecBoard
Zurück zur CVE-Übersicht

CVE-2026-12541

HIGH(8.2)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Risk Signal Score21/100 — NIEDRIG
  • CVSS 8.2 — Hoch

Erwähnungen (letzte 60 Tage)

Artikel

EPSS-Score

1.2%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

8.2

Technische Schwere

Beschreibung

A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.

Betroffene Produkte

  • cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*
  • cpe:2.3:a:theforeman:foreman:-:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*

Referenzen