Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2025-2157

Foreman: disclosure of executed commands and outputs in foreman / red hat satellite

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, exposing sensitive command outputs, such as /etc/shadow. This issue can lead to information disclosure and privilege escalation if exploited effectively.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Satellite Server

Default version status: unknown

  • 6.16affected
  • 6.17affected

Red Hat Red Hat Satellite 6

Default version status: affected

References