Description
A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, exposing sensitive command outputs, such as /etc/shadow. This issue can lead to information disclosure and privilege escalation if exploited effectively.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Satellite Server | 6.16, 6.17 | — |
| Red Hat | Red Hat Satellite 6 | — | — |
References
- https://access.redhat.com/security/cve/CVE-2025-2157 vdb-entry
- RHBZ#2351092 issue-tracking