Medium WID-SEC-2023-2118 1 CVE

Red Hat Enterprise Linux (subscription-manager): Schwachstelle ermöglicht Privilegieneskalation

Published Aug 22, 2023 · Updated Jan 1, 2024 · Revision 4 · de-DE

Vendor: Fedora Vendor: Red Hat Product: Enterprise Linux Product: Enterprise Linux 7 Product: Enterprise Linux 8 Product: Enterprise Linux 8.1 Update Services for SAP Solutions Product: Enterprise Linux 8.2 Advanced Update Support Product: Enterprise Linux 8.2 Telecommunications Update Service Product: Enterprise Linux 8.4 Advanced Mission Critical Update Support Product: Enterprise Linux 8.4 Telecommunications Update Service Product: Enterprise Linux 8.4 Update Services for SAP Solutions Product: Enterprise Linux 8.6 Extended Update Support Product: Enterprise Linux 9 Product: Enterprise Linux 9.0 Extended Update Support Product: Linux Product: OpenShift Container Platform < 4.14.0 Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 1

High 7.8

CVE-2023-3899

Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Azure Linux

Aug 23, 2023

Revision history

2024-01-01 #4
Neue Updates von Red Hat aufgenommen
2023-09-18 #3
Neue Updates von Red Hat aufgenommen
2023-09-05 #2
Neue Updates von Red Hat aufgenommen
2023-08-22 #1
Initiale Fassung

References

Red Hat Security Advisory RHSA-2023:4701-01 vom 2023-08-22
https://access.redhat.com/errata/RHSA-2023:4701
Red Hat Security Advisory RHSA-2023:4702-01 vom 2023-08-22
https://access.redhat.com/errata/RHSA-2023:4702
Red Hat Security Advisory RHSA-2023:4703-01 vom 2023-08-22
https://access.redhat.com/errata/RHSA-2023:4703
Red Hat Security Advisory RHSA-2023:4704-01 vom 2023-08-22
https://access.redhat.com/errata/RHSA-2023:4704
Red Hat Security Advisory RHSA-2023:4705-01 vom 2023-08-22
https://access.redhat.com/errata/RHSA-2023:4705
Red Hat Security Advisory RHSA-2023:4706-01 vom 2023-08-22
https://access.redhat.com/errata/RHSA-2023:4706
Red Hat Security Advisory RHSA-2023:4707-01 vom 2023-08-22
https://access.redhat.com/errata/RHSA-2023:4707
Red Hat Security Advisory RHSA-2023:4708-01 vom 2023-08-22
https://access.redhat.com/errata/RHSA-2023:4708
Fedora Security Advisory FEDORA-2023-0F2F9BC779 vom 2023-08-23
http://bodhi.fedoraproject.org/updates/FEDORA-2023-0f2f9bc779
Fedora Security Advisory FEDORA-2023-29A012C0DB vom 2023-08-23
http://bodhi.fedoraproject.org/updates/FEDORA-2023-29a012c0db
Red Hat Security Advisory RHSA-2023:4982 vom 2023-09-05
https://access.redhat.com/errata/RHSA-2023:4982
Red Hat Security Advisory RHSA-2023:5206 vom 2023-09-18
https://access.redhat.com/errata/RHSA-2023:5206
Red Hat Security Advisory RHSA-2023:5006 vom 2023-12-30
https://access.redhat.com/errata/RHSA-2023:5006