Foreman and Red Hat Satellite Temporary File Permission Vulnerability Allowing Information Disclosure

A vulnerability exists in Foreman/Red Hat Satellite due to improper file permissions on temporary files created under /var/tmp during job execution. This flaw enables low-privileged OS users to access and read command outputs, potentially exposing sensitive information such as system credentials or configuration details. While this vulnerability does not directly escalate privileges, it increases the risk of information disclosure, which could be exploited in further attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as system credentials or configuration details, which could be used to escalate privileges or conduct further attacks.