Foreman: read-only access to entire db from templates

Versions reported by the vendor

Affected version ranges reported by the assigning authority (redhat). Independent of NVD's CPE analysis and usually ahead of it.

• github.com/theforeman/foreman foreman

  • all versionsaffected

• Red Hat Red Hat Satellite 6.13 for RHEL 8

  • 0:3.5.1.25-1.el8sat and laternot affected · rpm

• Red Hat Red Hat Satellite 6.14 for RHEL 8

  • 0:3.7.0.14-1.el8sat and laternot affected · rpm

• Red Hat Red Hat Satellite 6.15 for RHEL 8

  • 0:3.9.1.11-1.el8sat and laternot affected · rpm

• Red Hat Red Hat Satellite 6.16 for RHEL 8

  • 0:3.12.0.1-1.el8sat and laternot affected · rpm

• Red Hat Red Hat Satellite 6.16 for RHEL 9

  • 0:3.12.0.1-1.el9sat and laternot affected · rpm

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

The extension requests broader permissions than its function needs and sends the data it collects out for purposes beyond its stated function.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1{2  "permissions": ["tabs", "<all_urls>"],3  "background": { "service_worker": "analytics.js" }4}

1{2  "permissions": ["activeTab"],3  "host_permissions": ["https://yildiz.example/*"]4}

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.