Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-4871 EUVD-2024-44561GHSA-q5x2-4347-hrg2

Foreman: host ssh key not being checked in remote execution

Published May 14, 2024 · Updated Feb 25, 2026 · Assigned by redhat

Description

A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker's ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.

Affected products

VendorProductAffectedFixed
— foreman 3.9.1.8 —
Red Hat Red Hat Satellite 6.15 for RHEL 8 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Red Hat Satellite Utils 6 foreman +1 3.9.1.8-1.el8sat RHBA-2024:4589
Red Hat Satellite Utils 6 satellite +1 6.15.2-1.el8sat RHBA-2024:4589
Red Hat Satellite Capsule 6 foreman +1 3.9.1.8-1.el8sat RHBA-2024:4589
Red Hat Satellite Capsule 6 foreman-installer +1 1:3.9.3.2-1.el8sat RHBA-2024:4589
Red Hat Satellite Capsule 6 python-pulp-container +1 2.16.9-1.el8pc RHBA-2024:4589
Red Hat Satellite Capsule 6 python-pulpcore +1 3.39.15-1.el8pc RHBA-2024:4589
Red Hat Satellite Capsule 6 rubygem-dynflow 1.8.3-1.el8sat RHBA-2024:4589
Red Hat Satellite Capsule 6 rubygem-smart_proxy_container_gateway 3.0.0-1.el8sat RHBA-2024:4589
Red Hat Satellite Capsule 6 rubygem-smart_proxy_remote_execution_ssh 0.10.6-1.el8sat RHBA-2024:4589
Red Hat Satellite Capsule 6 satellite +2 6.15.2-1.el8sat RHBA-2024:4589
Red Hat Satellite 6 candlepin +1 4.3.14-1.el8sat RHBA-2024:4589
Red Hat Satellite 6 foreman +14 3.9.1.8-1.el8sat RHBA-2024:4589
Red Hat Satellite 6 foreman-installer +1 1:3.9.3.2-1.el8sat RHBA-2024:4589
Red Hat Satellite 6 python-pulp-container +1 2.16.9-1.el8pc RHBA-2024:4589
Red Hat Satellite 6 python-pulpcore +1 3.39.15-1.el8pc RHBA-2024:4589
Red Hat Satellite 6 rubygem-dynflow 1.8.3-1.el8sat RHBA-2024:4589
Red Hat Satellite 6 rubygem-foreman_ansible 13.0.6-1.el8sat RHBA-2024:4589
Red Hat Satellite 6 rubygem-foreman_remote_execution +1 12.0.7-1.el8sat RHBA-2024:4589
Red Hat Satellite 6 rubygem-katello 4.11.0.15-1.el8sat RHBA-2024:4589
Red Hat Satellite 6 rubygem-smart_proxy_container_gateway 3.0.0-1.el8sat RHBA-2024:4589
Red Hat Satellite 6 rubygem-smart_proxy_remote_execution_ssh 0.10.6-1.el8sat RHBA-2024:4589
Red Hat Satellite 6 satellite +2 6.15.2-1.el8sat RHBA-2024:4589

Advisories 1

References