CVE-2023-3899

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-3899
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3899.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-3899
Related
Published
2023-08-23T11:15:07Z
Modified
2025-01-14T11:51:54.528961Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.

References

Affected packages

Git / github.com/candlepin/subscription-manager

Affected ranges

Type
GIT
Repo
https://github.com/candlepin/subscription-manager
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

python-rhsm-0.*

python-rhsm-0.94.1-1
python-rhsm-0.94.10-1
python-rhsm-0.94.11-1
python-rhsm-0.94.12-1
python-rhsm-0.94.13-1
python-rhsm-0.94.2-1
python-rhsm-0.94.3-1
python-rhsm-0.94.4-1
python-rhsm-0.94.5-1
python-rhsm-0.94.6-1
python-rhsm-0.94.7-1
python-rhsm-0.94.8-1
python-rhsm-0.94.9-1
python-rhsm-0.95.1-1
python-rhsm-0.95.2-1
python-rhsm-0.96.1-1
python-rhsm-0.96.10-1
python-rhsm-0.96.11-1
python-rhsm-0.96.12-1
python-rhsm-0.96.2-1
python-rhsm-0.96.3-1
python-rhsm-0.96.4-1
python-rhsm-0.96.5-1
python-rhsm-0.96.6-1
python-rhsm-0.96.7-1
python-rhsm-0.96.8-1
python-rhsm-0.96.9-1
python-rhsm-0.97.1-1
python-rhsm-0.98.2-1
python-rhsm-0.98.3-1
python-rhsm-0.98.4-1
python-rhsm-0.98.5-1
python-rhsm-0.98.6-1
python-rhsm-0.98.7-1
python-rhsm-0.99.2-1
python-rhsm-0.99.3-1
python-rhsm-0.99.4-1
python-rhsm-0.99.5-1
python-rhsm-0.99.6-1
python-rhsm-0.99.7-1
python-rhsm-0.99.8-1

python-rhsm-1.*

python-rhsm-1.0.0-1
python-rhsm-1.0.1-1
python-rhsm-1.0.2-1
python-rhsm-1.0.3-1
python-rhsm-1.0.4-1
python-rhsm-1.0.5-1
python-rhsm-1.0.6-1
python-rhsm-1.0.7-1
python-rhsm-1.1.1-1
python-rhsm-1.1.2-1
python-rhsm-1.1.3-1
python-rhsm-1.1.4-1
python-rhsm-1.1.5-1
python-rhsm-1.1.6-1
python-rhsm-1.10.1-1
python-rhsm-1.10.10-1
python-rhsm-1.10.11-1
python-rhsm-1.10.12-1
python-rhsm-1.10.2-1
python-rhsm-1.10.3-1
python-rhsm-1.10.5-1
python-rhsm-1.10.6-1
python-rhsm-1.10.7-1
python-rhsm-1.10.8-1
python-rhsm-1.10.9-1
python-rhsm-1.11.1-1
python-rhsm-1.11.2-1
python-rhsm-1.11.3-1
python-rhsm-1.11.4-1
python-rhsm-1.11.5-1
python-rhsm-1.12.1-1
python-rhsm-1.12.2-1
python-rhsm-1.12.3-1
python-rhsm-1.12.4-1
python-rhsm-1.12.5-1
python-rhsm-1.13.1-1
python-rhsm-1.13.10-1
python-rhsm-1.13.2-1
python-rhsm-1.13.3-1
python-rhsm-1.13.4-1
python-rhsm-1.13.5-1
python-rhsm-1.13.6-1
python-rhsm-1.13.7-1
python-rhsm-1.13.8-1
python-rhsm-1.13.9-1
python-rhsm-1.14.1-1
python-rhsm-1.14.2-1
python-rhsm-1.14.3-1
python-rhsm-1.15.1-1
python-rhsm-1.15.2-1
python-rhsm-1.15.3-1
python-rhsm-1.15.4-1
python-rhsm-1.16.0-1
python-rhsm-1.16.1-1
python-rhsm-1.16.2-1
python-rhsm-1.16.3-1
python-rhsm-1.16.4-1
python-rhsm-1.16.5-1
python-rhsm-1.16.6-1
python-rhsm-1.17.1-1
python-rhsm-1.17.2-1
python-rhsm-1.17.4-1
python-rhsm-1.17.5-1
python-rhsm-1.18.1-1
python-rhsm-1.18.2-1
python-rhsm-1.18.3-1
python-rhsm-1.18.4-1
python-rhsm-1.18.5-1
python-rhsm-1.18.6-1
python-rhsm-1.19.0-1
python-rhsm-1.19.1-1
python-rhsm-1.19.2-1
python-rhsm-1.19.3-1
python-rhsm-1.19.4-1
python-rhsm-1.19.5-1
python-rhsm-1.19.6-1
python-rhsm-1.20.0-1
python-rhsm-1.20.1-1
python-rhsm-1.20.2-1
python-rhsm-1.8.0-1
python-rhsm-1.8.1-1
python-rhsm-1.8.10-1
python-rhsm-1.8.11-1
python-rhsm-1.8.12-1
python-rhsm-1.8.13-1
python-rhsm-1.8.14-1
python-rhsm-1.8.2-1
python-rhsm-1.8.3-1
python-rhsm-1.8.5-1
python-rhsm-1.8.6-1
python-rhsm-1.8.7-1
python-rhsm-1.8.8-1
python-rhsm-1.8.9-1
python-rhsm-1.9.1-1
python-rhsm-1.9.2-1

subscription-manager-0.*

subscription-manager-0.96.2-1
subscription-manager-0.96.3-1
subscription-manager-0.96.4-1
subscription-manager-0.96.5-1
subscription-manager-0.96.6-1
subscription-manager-0.96.7-1
subscription-manager-0.96.8-1
subscription-manager-0.96.9-1
subscription-manager-0.97.1-1
subscription-manager-0.97.2-1
subscription-manager-0.98.2-1
subscription-manager-0.98.3-1
subscription-manager-0.98.4-1
subscription-manager-0.98.5-1
subscription-manager-0.98.6-1
subscription-manager-0.98.7-1
subscription-manager-0.98.8-1
subscription-manager-0.99.10-1
subscription-manager-0.99.11-1
subscription-manager-0.99.12-1
subscription-manager-0.99.13-1
subscription-manager-0.99.2-1
subscription-manager-0.99.3-1
subscription-manager-0.99.4-1
subscription-manager-0.99.5-1
subscription-manager-0.99.6-1
subscription-manager-0.99.7-1
subscription-manager-0.99.8-1
subscription-manager-0.99.9-1

subscription-manager-1.*

subscription-manager-1.0.1-1
subscription-manager-1.0.10-1
subscription-manager-1.0.11-1
subscription-manager-1.0.12-1
subscription-manager-1.0.13-1
subscription-manager-1.0.14-1
subscription-manager-1.0.15-1
subscription-manager-1.0.16-1
subscription-manager-1.0.17-1
subscription-manager-1.0.2-1
subscription-manager-1.0.3-1
subscription-manager-1.0.4-1
subscription-manager-1.0.5-1
subscription-manager-1.0.6-1
subscription-manager-1.0.7-1
subscription-manager-1.0.8-1
subscription-manager-1.0.9-1
subscription-manager-1.1.1-1
subscription-manager-1.1.10-1
subscription-manager-1.1.2-1
subscription-manager-1.1.3-1
subscription-manager-1.1.4-1
subscription-manager-1.1.5-1
subscription-manager-1.1.6-1
subscription-manager-1.1.7-1
subscription-manager-1.1.8-1
subscription-manager-1.1.9-1
subscription-manager-1.10.1-1
subscription-manager-1.10.10-1
subscription-manager-1.10.11-1
subscription-manager-1.10.12-1
subscription-manager-1.10.13-1
subscription-manager-1.10.14-1
subscription-manager-1.10.2-1
subscription-manager-1.10.3-1
subscription-manager-1.10.4-1
subscription-manager-1.10.5-1
subscription-manager-1.10.6-1
subscription-manager-1.10.7-1
subscription-manager-1.10.8-1
subscription-manager-1.10.9-1
subscription-manager-1.11.1-1
subscription-manager-1.11.2-1
subscription-manager-1.11.3-1
subscription-manager-1.11.4-1
subscription-manager-1.11.5-1
subscription-manager-1.11.6-1
subscription-manager-1.11.7-1
subscription-manager-1.12.1-1
subscription-manager-1.12.10-1
subscription-manager-1.12.11-1
subscription-manager-1.12.12-1
subscription-manager-1.12.13-1
subscription-manager-1.12.14-1
subscription-manager-1.12.2-1
subscription-manager-1.12.3-1
subscription-manager-1.12.4-1
subscription-manager-1.12.5-1
subscription-manager-1.12.6-1
subscription-manager-1.12.7-1
subscription-manager-1.12.8-1
subscription-manager-1.12.9-1
subscription-manager-1.13.1-1
subscription-manager-1.13.10-1
subscription-manager-1.13.11-1
subscription-manager-1.13.12-1
subscription-manager-1.13.13-1
subscription-manager-1.13.2-1
subscription-manager-1.13.3-1
subscription-manager-1.13.4-1
subscription-manager-1.13.5-1
subscription-manager-1.13.6-1
subscription-manager-1.13.7-1
subscription-manager-1.13.8-1
subscription-manager-1.13.9-1
subscription-manager-1.14.1-1
subscription-manager-1.14.2-1
subscription-manager-1.14.3-1
subscription-manager-1.14.4-1
subscription-manager-1.14.5-1
subscription-manager-1.14.6-1
subscription-manager-1.14.7-1
subscription-manager-1.14.8-1
subscription-manager-1.14.9-1
subscription-manager-1.15.1-1
subscription-manager-1.15.2-1
subscription-manager-1.15.3-1
subscription-manager-1.15.4-1
subscription-manager-1.15.5-1
subscription-manager-1.15.6-1
subscription-manager-1.15.7-1
subscription-manager-1.16.0-1
subscription-manager-1.16.1-1
subscription-manager-1.16.2-1
subscription-manager-1.16.3-1
subscription-manager-1.16.4-1
subscription-manager-1.16.5-1
subscription-manager-1.16.6-1
subscription-manager-1.16.7-1
subscription-manager-1.16.8-1
subscription-manager-1.17.1-1
subscription-manager-1.17.2-1
subscription-manager-1.17.3-1
subscription-manager-1.17.4-1
subscription-manager-1.17.5-1
subscription-manager-1.17.6-1
subscription-manager-1.17.7-1
subscription-manager-1.17.8-1
subscription-manager-1.17.9-1
subscription-manager-1.18.1-1
subscription-manager-1.18.2-1
subscription-manager-1.18.3-1
subscription-manager-1.18.4-1
subscription-manager-1.18.5-1
subscription-manager-1.18.6-1
subscription-manager-1.19.0-1
subscription-manager-1.19.1-1
subscription-manager-1.19.10-1
subscription-manager-1.19.11-1
subscription-manager-1.19.12-1
subscription-manager-1.19.2-1
subscription-manager-1.19.3-1
subscription-manager-1.19.4-1
subscription-manager-1.19.5-1
subscription-manager-1.19.6-1
subscription-manager-1.19.7-1
subscription-manager-1.19.8-1
subscription-manager-1.19.9-1
subscription-manager-1.20.0-1
subscription-manager-1.20.1-1
subscription-manager-1.20.2-1
subscription-manager-1.20.3-1
subscription-manager-1.20.4-1
subscription-manager-1.20.5-1
subscription-manager-1.20.6-1
subscription-manager-1.20.7-1
subscription-manager-1.20.8-1
subscription-manager-1.21.1-1
subscription-manager-1.21.2-1
subscription-manager-1.21.2-2
subscription-manager-1.21.2-3
subscription-manager-1.21.3-1
subscription-manager-1.21.4-1
subscription-manager-1.21.4-2
subscription-manager-1.21.4-3
subscription-manager-1.21.5-1
subscription-manager-1.22.0-1
subscription-manager-1.22.1-1
subscription-manager-1.23.1-1
subscription-manager-1.23.2-1
subscription-manager-1.23.3-1
subscription-manager-1.23.4-1
subscription-manager-1.24.0-1
subscription-manager-1.24.1-1
subscription-manager-1.24.2-1
subscription-manager-1.25.1-1
subscription-manager-1.25.10-1
subscription-manager-1.25.11-1
subscription-manager-1.25.3-1
subscription-manager-1.25.4-1
subscription-manager-1.25.5-1
subscription-manager-1.25.6-1
subscription-manager-1.25.7-1
subscription-manager-1.25.8-1
subscription-manager-1.25.9-1
subscription-manager-1.26.1-1
subscription-manager-1.26.2-1
subscription-manager-1.26.3-1
subscription-manager-1.26.4-1
subscription-manager-1.27.1-1
subscription-manager-1.27.2-1
subscription-manager-1.27.3-1
subscription-manager-1.27.4-1
subscription-manager-1.27.5-1
subscription-manager-1.28.0-1
subscription-manager-1.28.1-1
subscription-manager-1.28.10-1
subscription-manager-1.28.11-1
subscription-manager-1.28.12-1
subscription-manager-1.28.13-1
subscription-manager-1.28.15-1
subscription-manager-1.28.16-1
subscription-manager-1.28.17-1
subscription-manager-1.28.18-1
subscription-manager-1.28.19-1
subscription-manager-1.28.2-1
subscription-manager-1.28.20-1
subscription-manager-1.28.21-1
subscription-manager-1.28.22-1
subscription-manager-1.28.23-1
subscription-manager-1.28.24-1
subscription-manager-1.28.25-1
subscription-manager-1.28.26-1
subscription-manager-1.28.27-1
subscription-manager-1.28.28-1
subscription-manager-1.28.29-1
subscription-manager-1.28.3-1
subscription-manager-1.28.30-1
subscription-manager-1.28.31-1
subscription-manager-1.28.32-1
subscription-manager-1.28.33-1
subscription-manager-1.28.34-1
subscription-manager-1.28.35-1
subscription-manager-1.28.36-1
subscription-manager-1.28.37-1
subscription-manager-1.28.38-1
subscription-manager-1.28.4-1
subscription-manager-1.28.5-1
subscription-manager-1.28.6-1
subscription-manager-1.28.7-1
subscription-manager-1.28.8-1
subscription-manager-1.28.9-1
subscription-manager-1.8.0-1
subscription-manager-1.8.1-1
subscription-manager-1.8.10-1
subscription-manager-1.8.11-1
subscription-manager-1.8.12-1
subscription-manager-1.8.13-1
subscription-manager-1.8.2-1
subscription-manager-1.8.3-1
subscription-manager-1.8.4-1
subscription-manager-1.8.5-1
subscription-manager-1.8.6-1
subscription-manager-1.8.7-1
subscription-manager-1.8.8-1
subscription-manager-1.8.9-1
subscription-manager-1.9.1-1
subscription-manager-1.9.2-1