CVE-2021-40348

Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config-satellite.pl doesn't sanitize the configuration filename used to append Spacewalk-specific key-value pair. The script is intended to be run by the tomcat user account with Sudo, according to the installation setup. This can lead to the ability of an attacker to use --option to append arbitrary code to a root-owned file that eventually will be executed by the system. This is fixed in Uyuni spacewalk-admin 4.3.2-1.
Configurations

Configuration 1 (hide)

cpe:2.3:a:uyuni-project:uyuni:2021.08:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:spacewalk_project:spacewalk:2.10:*:*:*:*:*:*:*

History

21 Nov 2024, 06:23

Type Values Removed Values Added
References () http://www.openwall.com/lists/oss-security/2021/10/28/4 - Exploit, Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2021/10/28/4 - Exploit, Mailing List, Patch, Third Party Advisory
References () https://github.com/uyuni-project/uyuni/commit/790c7388efac6923c5475e01c1ff718dffa9f052 - Patch, Third Party Advisory () https://github.com/uyuni-project/uyuni/commit/790c7388efac6923c5475e01c1ff718dffa9f052 - Patch, Third Party Advisory

04 Dec 2021, 03:08

Type Values Removed Values Added
References (CONFIRM) https://github.com/uyuni-project/uyuni/commit/790c7388efac6923c5475e01c1ff718dffa9f052 - (CONFIRM) https://github.com/uyuni-project/uyuni/commit/790c7388efac6923c5475e01c1ff718dffa9f052 - Patch, Third Party Advisory

04 Nov 2021, 03:15

Type Values Removed Values Added
References
  • (CONFIRM) https://github.com/uyuni-project/uyuni/commit/790c7388efac6923c5475e01c1ff718dffa9f052 -

02 Nov 2021, 19:03

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 9.3
v3 : 8.8
CWE CWE-94
CPE cpe:2.3:a:uyuni_project:uyuni:2021.08:*:*:*:*:*:*:*
cpe:2.3:a:spacewalk_project:spacewalk:2.10:*:*:*:*:*:*:*
References (MISC) http://www.openwall.com/lists/oss-security/2021/10/28/4 - (MISC) http://www.openwall.com/lists/oss-security/2021/10/28/4 - Exploit, Mailing List, Patch, Third Party Advisory

01 Nov 2021, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-11-01 05:15

Updated : 2024-11-21 06:23


NVD link : CVE-2021-40348

Mitre link : CVE-2021-40348

CVE.ORG link : CVE-2021-40348


JSON object : View

Products Affected

uyuni-project

  • uyuni

spacewalk_project

  • spacewalk
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')