github - GHSA-vvff-6wrr-4g7q

GHSA-vvff-6wrr-4g7q

Vulnerability from github

Published

2022-03-24 00:00

Modified

2023-02-08 22:41

Severity ?

8.0 (High) - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Summary

Missing Authentication for Critical Function in Foreman Ansible

Details

An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "RubyGems",
        "name": "foreman_ansible"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2021-3589"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-306"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2022-03-29T20:01:57Z",
    "nvd_published_at": "2022-03-23T20:15:00Z",
    "severity": "HIGH"
  },
  "details": "An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
  "id": "GHSA-vvff-6wrr-4g7q",
  "modified": "2023-02-08T22:41:33Z",
  "published": "2022-03-24T00:00:17Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3589"
    },
    {
      "type": "WEB",
      "url": "https://github.com/theforeman/foreman_ansible/commit/a5e0827bc3ec6c8ab82f968907857a15646305d5"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2021-3589"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1969265"
    },
    {
      "type": "WEB",
      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/foreman_ansible/CVE-2021-3589.yml"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/theforeman/foreman_ansible"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Missing Authentication for Critical Function in Foreman Ansible"
}

gsd-2021-3589

Vulnerability from gsd

Modified

2022-03-24 00:00

Details

Aliases

CVE-2021-3589

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2021-3589",
    "description": "An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
    "id": "GSD-2021-3589"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "affected": [
        {
          "package": {
            "ecosystem": "RubyGems",
            "name": "foreman_ansible",
            "purl": "pkg:gem/foreman_ansible"
          }
        }
      ],
      "aliases": [
        "CVE-2021-3589",
        "GHSA-vvff-6wrr-4g7q"
      ],
      "details": "An authorization flaw was found in Foreman Ansible. An authenticated attacker\nwith certain permissions to create and run Ansible jobs can access hosts\nthrough job templates. The highest threat from this vulnerability is to data\nconfidentiality and integrity as well as system availability.\n",
      "id": "GSD-2021-3589",
      "modified": "2022-03-24T00:00:00.000Z",
      "published": "2022-03-24T00:00:00.000Z",
      "references": [
        {
          "type": "WEB",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3589"
        },
        {
          "type": "WEB",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1969265"
        },
        {
          "type": "WEB",
          "url": "https://github.com/theforeman/foreman_ansible/commit/a5e0827bc3ec6c8ab82f968907857a15646305d5"
        }
      ],
      "schema_version": "1.4.0",
      "severity": [
        {
          "score": 9.9,
          "type": "CVSS_V3"
        }
      ],
      "summary": "Missing Authentication for Critical Function in Foreman Ansible"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2021-3589",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Foreman Ansible",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "Affects foreman_ansible-2.0.0 and above."
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-306",
                "lang": "eng",
                "value": "CWE-306 - Missing Authentication for Critical Function"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://access.redhat.com/security/cve/CVE-2021-3589",
            "refsource": "MISC",
            "url": "https://access.redhat.com/security/cve/CVE-2021-3589"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1969265",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1969265"
          }
        ]
      }
    },
    "github.com/rubysec/ruby-advisory-db": {
      "cve": "2021-3589",
      "cvss_v3": 9.9,
      "date": "2022-03-24",
      "description": "An authorization flaw was found in Foreman Ansible. An authenticated attacker\nwith certain permissions to create and run Ansible jobs can access hosts\nthrough job templates. The highest threat from this vulnerability is to data\nconfidentiality and integrity as well as system availability.\n",
      "gem": "foreman_ansible",
      "ghsa": "vvff-6wrr-4g7q",
      "patched_versions": [
        "\u003e= 2.0.0"
      ],
      "related": {
        "url": [
          "https://bugzilla.redhat.com/show_bug.cgi?id=1969265",
          "https://github.com/theforeman/foreman_ansible/commit/a5e0827bc3ec6c8ab82f968907857a15646305d5"
        ]
      },
      "title": "Missing Authentication for Critical Function in Foreman Ansible",
      "url": "https://access.redhat.com/security/cve/CVE-2021-3589"
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "\u003c7.1.0",
          "affected_versions": "All versions before 7.1.0",
          "cvss_v2": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-306",
            "CWE-937"
          ],
          "date": "2023-02-08",
          "description": "An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "fixed_versions": [
            "7.1.0"
          ],
          "identifier": "CVE-2021-3589",
          "identifiers": [
            "CVE-2021-3589",
            "GHSA-vvff-6wrr-4g7q"
          ],
          "not_impacted": "All versions starting from 7.1.0",
          "package_slug": "gem/foreman_ansible",
          "pubdate": "2022-03-23",
          "solution": "Upgrade to version 7.1.0 or above.",
          "title": "Missing Authentication for Critical Function in Foreman Ansible",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2021-3589",
            "https://access.redhat.com/security/cve/CVE-2021-3589",
            "https://bugzilla.redhat.com/show_bug.cgi?id=1969265",
            "https://github.com/advisories/GHSA-vvff-6wrr-4g7q"
          ],
          "uuid": "695f0a8d-7dc5-4e42-9419-893ed9448ade"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:theforeman:foreman_ansible:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.1.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2021-3589"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-306"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://access.redhat.com/security/cve/CVE-2021-3589",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2021-3589"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1969265",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking",
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1969265"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.3,
          "impactScore": 6.0
        }
      },
      "lastModifiedDate": "2023-02-08T19:04Z",
      "publishedDate": "2022-03-23T20:15Z"
    }
  }
}

cve-2021-3589

Vulnerability from cvelistv5

Published

2022-03-23 19:46

Modified

2024-08-03 17:01

Severity ?

Summary

References

▼	URL	Tags
	https://access.redhat.com/security/cve/CVE-2021-3589	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=1969265	x_refsource_MISC

Impacted products

Vendor

Product

Version

▼

n/a

Foreman Ansible

Version: Affects foreman_ansible-2.0.0 and above.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:01:07.577Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2021-3589"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1969265"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Foreman Ansible",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Affects foreman_ansible-2.0.0 and above."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306 - Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-03-23T19:46:10",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2021-3589"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1969265"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2021-3589",
    "datePublished": "2022-03-23T19:46:10",
    "dateReserved": "2021-06-09T00:00:00",
    "dateUpdated": "2024-08-03T17:01:07.577Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

GHSA-vvff-6wrr-4g7q

Vulnerability from github

gsd-2021-3589

Vulnerability from gsd

cve-2021-3589

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature