7.8

CVE-2023-3899

Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Subscription-manager Version < 1.28.39
Redhat ≫ Subscription-manager Version >= 1.29.0 < 1.29.37
Fedoraproject ≫ Fedora Version 37
Fedoraproject ≫ Fedora Version 38
Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Enterprise Linux Version 9.0
Redhat ≫ Enterprise Linux Eus Version 8.6
Redhat ≫ Enterprise Linux Eus Version 8.8
Redhat ≫ Enterprise Linux Eus Version 9.0
Redhat ≫ Enterprise Linux Eus Version 9.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.163
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
RedHat 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-285 Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://access.redhat.com/errata/RHSA-2023:4701
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:4702
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:4703
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:4704
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:4705
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:4706
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:4707
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:4708
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-3899
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2225407
Vendor Advisory
Issue Tracking
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FJHKSBBZRDFOBNDU35FUKMYQIQYT6UJQ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDIHGNLS3TZVX7X2F735OKI4KXPY4AH6/