What happened
A vulnerability has been identified in the permission filtering mechanism of the foreman package, specifically affecting Red Hat Satellite 6 deployments. This flaw stems from the API’s method of loading permission filters by their identifier without applying a search limit based on the caller’s permissions. As a result, a low-privileged attacker—who already has the ability to delete filters within their own role—can potentially delete filters associated with other roles that are currently unlocked. This action effectively removes access controls, leading to a potential escalation of privileges and loss of access rights for affected roles. The vulnerability allows remote attack over the network, requiring no user interaction, and can be exploited through an exposed service directly.
Who is affected
Organizations using the foreman package within Red Hat Satellite 6 are affected by this vulnerability. The flaw impacts deployments where permission filters are utilised, and where an attacker has at least low-privileged access that permits the deletion of filters within their role. The issue does not depend on specific version numbers beyond the affected package series but stems from a design flaw in how filters are loaded and managed via the API. The flaw’s impact is restricted to scenarios where permission filtering is implemented, and an attacker can access the relevant interface over the network.
Recommended actions
- Implement network controls to restrict access to the exposed API or service vulnerable to exploitation.
- Apply segmentation strategies to limit the attack surface, especially for services exposing permission management functions.
- Review access permissions to ensure that only necessary accounts possess the ability to delete or modify filters.
- Monitor and audit permission filter activities to detect abnormal or unexpected deletions or modifications.
