Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2023-0462

Arbitrary code execution through yaml global parameters

Description

An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a foreman

Default version status: affected

Red Hat Red Hat Satellite 6

Default version status: affected

References