CVE-2021-40348

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-40348
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-40348.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-40348
Downstream
Related
Published
2021-11-01T05:15:07.007Z
Modified
2026-07-08T06:00:33.992570913Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config-satellite.pl doesn't sanitize the configuration filename used to append Spacewalk-specific key-value pair. The script is intended to be run by the tomcat user account with Sudo, according to the installation setup. This can lead to the ability of an attacker to use --option to append arbitrary code to a root-owned file that eventually will be executed by the system. This is fixed in Uyuni spacewalk-admin 4.3.2-1.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:spacewalk_project:spacewalk:2.10:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "2.10"
                },
                {
                    "last_affected": "2.10"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "spacewalk_project:spacewalk"
        }
    ]
}
References

Affected packages

Git / github.com/uyuni-project/uyuni

Affected ranges

Type
GIT
Repo
https://github.com/uyuni-project/uyuni
Events
Introduced
d870a30252b57abe3b0f32e81fe84595a1d3f5b8
Last affected
d870a30252b57abe3b0f32e81fe84595a1d3f5b8
Fixed
790c7388efac6923c5475e01c1ff718dffa9f052
Database specific 
{
    "extracted_events": [
        {
            "introduced": "2021.08"
        },
        {
            "last_affected": "2021.08"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:uyuni-project:uyuni:2021.08:*:*:*:*:*:*:*"
}

Affected versions

2021.*
2021.08
Uyuni-2021.*
Uyuni-2021.08
mgr-daemon-4.*
mgr-daemon-4.3.2-1
spacecmd-4.*
spacecmd-4.3.2-1
spacewalk-backend-4.*
spacewalk-backend-4.3.2-1
spacewalk-client-tools-4.*
spacewalk-client-tools-4.3.2-1
spacewalk-java-4.*
spacewalk-java-4.3.2-1
spacewalk-setup-4.*
spacewalk-setup-4.3.2-1
spacewalk-utils-4.*
spacewalk-utils-4.3.2-1
spacewalk-web-4.*
spacewalk-web-4.3.2-1
spacewalk-web-4.3.3-1
supportutils-plugin-susemanager-4.*
supportutils-plugin-susemanager-4.3.2-1
susemanager-4.*
susemanager-4.3.3-1
susemanager-nodejs-sdk-devel-4.*
susemanager-nodejs-sdk-devel-4.3.2-1
susemanager-schema-4.*
susemanager-schema-4.3.2-1
susemanager-sls-4.*
susemanager-sls-4.3.2-1
susemanager-sync-data-4.*
susemanager-sync-data-4.3.2-1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-40348.json"