Description
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | foreman | — | — |
| Red Hat | Red Hat Satellite 6.11 for RHEL 7 | — | — |
| Red Hat | Red Hat Satellite 6.11 for RHEL 8 | — | — |
| Red Hat | Red Hat Satellite 6.12 for RHEL 8 | — | — |
| Red Hat | Red Hat Satellite 6.13 for RHEL 8 | — | — |
| Red Hat | Red Hat Satellite 6.14 for RHEL 8 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Utils 6 | foreman +1 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | foreman +1 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | puppet-agent | 7.26.0-3.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | puppetserver | 7.11.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-django +1 | 3.2.21-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-future +1 | 0.18.3-1.el8pc | RHSA-2023:6818, RHSA-2023:4466 |
| Red Hat Satellite Capsule 6 | python-gitpython +1 | 3.1.32-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-pulp-ansible +1 | 1:0.16.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-requests +1 | 2.31.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-sqlparse +1 | 0.4.4-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | rubygem-rack | 2.2.7-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | foreman +13 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | foreman-redis | 3.7.0.9-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | puppet-agent | 7.26.0-3.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | puppetserver | 7.11.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-django +1 | 3.2.21-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-future +1 | 0.18.3-1.el8pc | RHSA-2023:6818, RHSA-2023:4466 |
| Red Hat Satellite 6 | python-gitpython +1 | 3.1.32-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-pulp-ansible +1 | 1:0.16.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-requests +1 | 2.31.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-sqlparse +1 | 0.4.4-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-actionpack +2 | 6.1.7.3-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-git | 1.18.0-0.1.el8sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | rubygem-globalid | 1.1.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-kubeclient | 4.10.1-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-rack | 2.2.7-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-safemode | 1.3.8-1.el8sat | RHSA-2023:5979, RHSA-2023:4466 |
| Red Hat Satellite 6 | tfm-rubygem-git | 1.18.0-0.1.el7sat | RHSA-2023:5980 |
| Red Hat Satellite 6 | yggdrasil-worker-forwarder | 0.0.3-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
Advisories 5
- RHSA-2023:6818 Red Hat Security Advisory: Satellite 6.14 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5980 Red Hat Security Advisory: Satellite 6.11.5.6 async security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5979 Red Hat Security Advisory: Satellite 6.12.5.2 Async Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:4466 Red Hat Security Advisory: Satellite 6.13.3 Async Security Update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- WID-SEC-2023-2723 Red Hat Satellite: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 14, 2025
References
- RHSA-2023:4466 vendor-advisory
- RHSA-2023:5979 vendor-advisory
- RHSA-2023:5980 vendor-advisory
- RHSA-2023:6818 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-0118 vdb-entry
- RHBZ#2159291 issue-tracking