CVE-2021-3584

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-3584
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3584.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-3584
Downstream
Published
2021-12-23T20:15:11.533Z
Modified
2026-03-14T14:49:38.141646Z
Severity
  • 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability of system. Fixed releases are 2.4.1, 2.5.1, 3.0.0.

References

Affected packages

Git / github.com/theforeman/smart-proxy

Affected ranges

Type
GIT
Repo
https://github.com/theforeman/smart-proxy
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d6d515c7ccd7b63243ae8be8f4aa506faf2a33b2
Introduced
9db8be445d447b3e0d1007f188ce32c89b20da78
Fixed
813a2c3a374244aaa587ab508cf8b08b35a51ead
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ce1ba3136a90dc8f4b6fbc09bc8b42e48999eb79
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
63b4b63fa2abf44d4c5661ca34f307d3801ff39b
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.4.1"
        },
        {
            "introduced": "2.5.0"
        },
        {
            "fixed": "2.5.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.0-rc2"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3584.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.0"
            }
        ]
    }
]