Forman: foreman: remote code execution via command injection in websocket proxy

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Foreman 安全漏洞

Foreman是Foreman开源的一套用于物理和虚拟服务器中的生命周期管理工具。该工具提供服务开通、配置管理以及报告状态等功能。 Foreman存在安全漏洞，该漏洞源于WebSocket代理实现中的命令注入，当系统使用来自计算资源提供商的未清理主机名值构建shell命令时，攻击者通过操作恶意计算资源服务器，在用户访问VM VNC控制台功能时可能在Foreman服务器上实现远程代码执行，从而可能导致敏感凭据和整个托管基础设施被破解。

N/A

N/A