| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| satellite | = 6.0≥ 6.16, < 6.16.7≥ 6.17, < 6.17.7≥ 6.18, < 6.18.4 | 6.16.76.17.76.18.4 |
| foreman | ≥ 3.17.0, < 3.17.2≥ 3.18.0, < 3.18.1< 3.16.3 | 3.17.23.18.13.16.3 |
A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン