What’s Vulnerable › Vulnerabilities

CVE-2025-2157: Foreman: disclosure of executed commands and outputs in foreman / red hat satellite

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-15 · updated 2026-06-17
• Weakness: CWE-922

Description

A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, exposing sensitive command outputs, such as /etc/shadow. This issue can lead to information disclosure and privilege escalation if exploited effectively.

Affected products

• Red Hat Satellite 6: all versions
• Red Hat Satellite Server: 6.16, 6.17

References

• https://access.redhat.com/security/cve/CVE-2025-2157
• https://bugzilla.redhat.com/show_bug.cgi?id=2351092

Get alerted when CVE-2025-2157 or the next vulnerability affects your stack