| Package | Affected versions | Patched versions |
|---|---|---|
| satellite | = 6.0≥ 6.16, < 6.16.4≥ 6.17, < 6.17.12≥ 6.18, < 6.18.10≥ 6.19, < 6.19.5 | 6.16.46.17.126.18.106.19.5 |
| foreman | = 5.0.0≥ 1.5.0, ≤ 3.19.1 |
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not sanitized or quoted, a local attacker can inject shell metacharacters (e.g., ;, &, |) to execute arbitrary system commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free