Skip to content
OpenAdvisories
Low · 3.3 CVE-2025-2157 EUVD-2025-6632GHSA-f324-3fxj-hh78

Foreman: disclosure of executed commands and outputs in foreman / red hat satellite

Published Mar 15, 2025 · Updated Nov 21, 2025 · Assigned by redhat

Description

A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, exposing sensitive command outputs, such as /etc/shadow. This issue can lead to information disclosure and privilege escalation if exploited effectively.

Affected products

VendorProductAffectedFixed
Red Hat Satellite Server 6.16, 6.17 —
Red Hat Red Hat Satellite 6 — —

References