CVE-2023-3899

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2023-3899

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3899.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-3899

Related

Published

2023-08-23T11:15:07Z

Modified

2025-01-14T11:51:54.528961Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.

References

Affected packages

Git / github.com/candlepin/subscription-manager

Affected ranges

Type: GIT
Repo: https://github.com/candlepin/subscription-manager
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

cf12ae6eb3f7c8c39f3af1ae8162ad3dd5a5fb1f

Affected versions

python-rhsm-0.*

python-rhsm-0.94.1-1

python-rhsm-0.94.10-1

python-rhsm-0.94.11-1

python-rhsm-0.94.12-1

python-rhsm-0.94.13-1

python-rhsm-0.94.2-1

python-rhsm-0.94.3-1

python-rhsm-0.94.4-1

python-rhsm-0.94.5-1

python-rhsm-0.94.6-1

python-rhsm-0.94.7-1

python-rhsm-0.94.8-1

python-rhsm-0.94.9-1

python-rhsm-0.95.1-1

python-rhsm-0.95.2-1

python-rhsm-0.96.1-1

python-rhsm-0.96.10-1

python-rhsm-0.96.11-1

python-rhsm-0.96.12-1

python-rhsm-0.96.2-1

python-rhsm-0.96.3-1

python-rhsm-0.96.4-1

python-rhsm-0.96.5-1

python-rhsm-0.96.6-1

python-rhsm-0.96.7-1

python-rhsm-0.96.8-1

python-rhsm-0.96.9-1

python-rhsm-0.97.1-1

python-rhsm-0.98.2-1

python-rhsm-0.98.3-1

python-rhsm-0.98.4-1

python-rhsm-0.98.5-1

python-rhsm-0.98.6-1

python-rhsm-0.98.7-1

python-rhsm-0.99.2-1

python-rhsm-0.99.3-1

python-rhsm-0.99.4-1

python-rhsm-0.99.5-1

python-rhsm-0.99.6-1

python-rhsm-0.99.7-1

python-rhsm-0.99.8-1

python-rhsm-1.*

python-rhsm-1.0.0-1

python-rhsm-1.0.1-1

python-rhsm-1.0.2-1

python-rhsm-1.0.3-1

python-rhsm-1.0.4-1

python-rhsm-1.0.5-1

python-rhsm-1.0.6-1

python-rhsm-1.0.7-1

python-rhsm-1.1.1-1

python-rhsm-1.1.2-1

python-rhsm-1.1.3-1

python-rhsm-1.1.4-1

python-rhsm-1.1.5-1

python-rhsm-1.1.6-1

python-rhsm-1.10.1-1

python-rhsm-1.10.10-1

python-rhsm-1.10.11-1

python-rhsm-1.10.12-1

python-rhsm-1.10.2-1

python-rhsm-1.10.3-1

python-rhsm-1.10.5-1

python-rhsm-1.10.6-1

python-rhsm-1.10.7-1

python-rhsm-1.10.8-1

python-rhsm-1.10.9-1

python-rhsm-1.11.1-1

python-rhsm-1.11.2-1

python-rhsm-1.11.3-1

python-rhsm-1.11.4-1

python-rhsm-1.11.5-1

python-rhsm-1.12.1-1

python-rhsm-1.12.2-1

python-rhsm-1.12.3-1

python-rhsm-1.12.4-1

python-rhsm-1.12.5-1

python-rhsm-1.13.1-1

python-rhsm-1.13.10-1

python-rhsm-1.13.2-1

python-rhsm-1.13.3-1

python-rhsm-1.13.4-1

python-rhsm-1.13.5-1

python-rhsm-1.13.6-1

python-rhsm-1.13.7-1

python-rhsm-1.13.8-1

python-rhsm-1.13.9-1

python-rhsm-1.14.1-1

python-rhsm-1.14.2-1

python-rhsm-1.14.3-1

python-rhsm-1.15.1-1

python-rhsm-1.15.2-1

python-rhsm-1.15.3-1

python-rhsm-1.15.4-1

python-rhsm-1.16.0-1

python-rhsm-1.16.1-1

python-rhsm-1.16.2-1

python-rhsm-1.16.3-1

python-rhsm-1.16.4-1

python-rhsm-1.16.5-1

python-rhsm-1.16.6-1

python-rhsm-1.17.1-1

python-rhsm-1.17.2-1

python-rhsm-1.17.4-1

python-rhsm-1.17.5-1

python-rhsm-1.18.1-1

python-rhsm-1.18.2-1

python-rhsm-1.18.3-1

python-rhsm-1.18.4-1

python-rhsm-1.18.5-1

python-rhsm-1.18.6-1

python-rhsm-1.19.0-1

python-rhsm-1.19.1-1

python-rhsm-1.19.2-1

python-rhsm-1.19.3-1

python-rhsm-1.19.4-1

python-rhsm-1.19.5-1

python-rhsm-1.19.6-1

python-rhsm-1.20.0-1

python-rhsm-1.20.1-1

python-rhsm-1.20.2-1

python-rhsm-1.8.0-1

python-rhsm-1.8.1-1

python-rhsm-1.8.10-1

python-rhsm-1.8.11-1

python-rhsm-1.8.12-1

python-rhsm-1.8.13-1

python-rhsm-1.8.14-1

python-rhsm-1.8.2-1

python-rhsm-1.8.3-1

python-rhsm-1.8.5-1

python-rhsm-1.8.6-1

python-rhsm-1.8.7-1

python-rhsm-1.8.8-1

python-rhsm-1.8.9-1

python-rhsm-1.9.1-1

python-rhsm-1.9.2-1

subscription-manager-0.*

subscription-manager-0.96.2-1

subscription-manager-0.96.3-1

subscription-manager-0.96.4-1

subscription-manager-0.96.5-1

subscription-manager-0.96.6-1

subscription-manager-0.96.7-1

subscription-manager-0.96.8-1

subscription-manager-0.96.9-1

subscription-manager-0.97.1-1

subscription-manager-0.97.2-1

subscription-manager-0.98.2-1

subscription-manager-0.98.3-1

subscription-manager-0.98.4-1

subscription-manager-0.98.5-1

subscription-manager-0.98.6-1

subscription-manager-0.98.7-1

subscription-manager-0.98.8-1

subscription-manager-0.99.10-1

subscription-manager-0.99.11-1

subscription-manager-0.99.12-1

subscription-manager-0.99.13-1

subscription-manager-0.99.2-1

subscription-manager-0.99.3-1

subscription-manager-0.99.4-1

subscription-manager-0.99.5-1

subscription-manager-0.99.6-1

subscription-manager-0.99.7-1

subscription-manager-0.99.8-1

subscription-manager-0.99.9-1

subscription-manager-1.*

subscription-manager-1.0.1-1

subscription-manager-1.0.10-1

subscription-manager-1.0.11-1

subscription-manager-1.0.12-1

subscription-manager-1.0.13-1

subscription-manager-1.0.14-1

subscription-manager-1.0.15-1

subscription-manager-1.0.16-1

subscription-manager-1.0.17-1

subscription-manager-1.0.2-1

subscription-manager-1.0.3-1

subscription-manager-1.0.4-1

subscription-manager-1.0.5-1

subscription-manager-1.0.6-1

subscription-manager-1.0.7-1

subscription-manager-1.0.8-1

subscription-manager-1.0.9-1

subscription-manager-1.1.1-1

subscription-manager-1.1.10-1

subscription-manager-1.1.2-1

subscription-manager-1.1.3-1

subscription-manager-1.1.4-1

subscription-manager-1.1.5-1

subscription-manager-1.1.6-1

subscription-manager-1.1.7-1

subscription-manager-1.1.8-1

subscription-manager-1.1.9-1

subscription-manager-1.10.1-1

subscription-manager-1.10.10-1

subscription-manager-1.10.11-1

subscription-manager-1.10.12-1

subscription-manager-1.10.13-1

subscription-manager-1.10.14-1

subscription-manager-1.10.2-1

subscription-manager-1.10.3-1

subscription-manager-1.10.4-1

subscription-manager-1.10.5-1

subscription-manager-1.10.6-1

subscription-manager-1.10.7-1

subscription-manager-1.10.8-1

subscription-manager-1.10.9-1

subscription-manager-1.11.1-1

subscription-manager-1.11.2-1

subscription-manager-1.11.3-1

subscription-manager-1.11.4-1

subscription-manager-1.11.5-1

subscription-manager-1.11.6-1

subscription-manager-1.11.7-1

subscription-manager-1.12.1-1

subscription-manager-1.12.10-1

subscription-manager-1.12.11-1

subscription-manager-1.12.12-1

subscription-manager-1.12.13-1

subscription-manager-1.12.14-1

subscription-manager-1.12.2-1

subscription-manager-1.12.3-1

subscription-manager-1.12.4-1

subscription-manager-1.12.5-1

subscription-manager-1.12.6-1

subscription-manager-1.12.7-1

subscription-manager-1.12.8-1

subscription-manager-1.12.9-1

subscription-manager-1.13.1-1

subscription-manager-1.13.10-1

subscription-manager-1.13.11-1

subscription-manager-1.13.12-1

subscription-manager-1.13.13-1

subscription-manager-1.13.2-1

subscription-manager-1.13.3-1

subscription-manager-1.13.4-1

subscription-manager-1.13.5-1

subscription-manager-1.13.6-1

subscription-manager-1.13.7-1

subscription-manager-1.13.8-1

subscription-manager-1.13.9-1

subscription-manager-1.14.1-1

subscription-manager-1.14.2-1

subscription-manager-1.14.3-1

subscription-manager-1.14.4-1

subscription-manager-1.14.5-1

subscription-manager-1.14.6-1

subscription-manager-1.14.7-1

subscription-manager-1.14.8-1

subscription-manager-1.14.9-1

subscription-manager-1.15.1-1

subscription-manager-1.15.2-1

subscription-manager-1.15.3-1

subscription-manager-1.15.4-1

subscription-manager-1.15.5-1

subscription-manager-1.15.6-1

subscription-manager-1.15.7-1

subscription-manager-1.16.0-1

subscription-manager-1.16.1-1

subscription-manager-1.16.2-1

subscription-manager-1.16.3-1

subscription-manager-1.16.4-1

subscription-manager-1.16.5-1

subscription-manager-1.16.6-1

subscription-manager-1.16.7-1

subscription-manager-1.16.8-1

subscription-manager-1.17.1-1

subscription-manager-1.17.2-1

subscription-manager-1.17.3-1

subscription-manager-1.17.4-1

subscription-manager-1.17.5-1

subscription-manager-1.17.6-1

subscription-manager-1.17.7-1

subscription-manager-1.17.8-1

subscription-manager-1.17.9-1

subscription-manager-1.18.1-1

subscription-manager-1.18.2-1

subscription-manager-1.18.3-1

subscription-manager-1.18.4-1

subscription-manager-1.18.5-1

subscription-manager-1.18.6-1

subscription-manager-1.19.0-1

subscription-manager-1.19.1-1

subscription-manager-1.19.10-1

subscription-manager-1.19.11-1

subscription-manager-1.19.12-1

subscription-manager-1.19.2-1

subscription-manager-1.19.3-1

subscription-manager-1.19.4-1

subscription-manager-1.19.5-1

subscription-manager-1.19.6-1

subscription-manager-1.19.7-1

subscription-manager-1.19.8-1

subscription-manager-1.19.9-1

subscription-manager-1.20.0-1

subscription-manager-1.20.1-1

subscription-manager-1.20.2-1

subscription-manager-1.20.3-1

subscription-manager-1.20.4-1

subscription-manager-1.20.5-1

subscription-manager-1.20.6-1

subscription-manager-1.20.7-1

subscription-manager-1.20.8-1

subscription-manager-1.21.1-1

subscription-manager-1.21.2-1

subscription-manager-1.21.2-2

subscription-manager-1.21.2-3

subscription-manager-1.21.3-1

subscription-manager-1.21.4-1

subscription-manager-1.21.4-2

subscription-manager-1.21.4-3

subscription-manager-1.21.5-1

subscription-manager-1.22.0-1

subscription-manager-1.22.1-1

subscription-manager-1.23.1-1

subscription-manager-1.23.2-1

subscription-manager-1.23.3-1

subscription-manager-1.23.4-1

subscription-manager-1.24.0-1

subscription-manager-1.24.1-1

subscription-manager-1.24.2-1

subscription-manager-1.25.1-1

subscription-manager-1.25.10-1

subscription-manager-1.25.11-1

subscription-manager-1.25.3-1

subscription-manager-1.25.4-1

subscription-manager-1.25.5-1

subscription-manager-1.25.6-1

subscription-manager-1.25.7-1

subscription-manager-1.25.8-1

subscription-manager-1.25.9-1

subscription-manager-1.26.1-1

subscription-manager-1.26.2-1

subscription-manager-1.26.3-1

subscription-manager-1.26.4-1

subscription-manager-1.27.1-1

subscription-manager-1.27.2-1

subscription-manager-1.27.3-1

subscription-manager-1.27.4-1

subscription-manager-1.27.5-1

subscription-manager-1.28.0-1

subscription-manager-1.28.1-1

subscription-manager-1.28.10-1

subscription-manager-1.28.11-1

subscription-manager-1.28.12-1

subscription-manager-1.28.13-1

subscription-manager-1.28.15-1

subscription-manager-1.28.16-1

subscription-manager-1.28.17-1

subscription-manager-1.28.18-1

subscription-manager-1.28.19-1

subscription-manager-1.28.2-1

subscription-manager-1.28.20-1

subscription-manager-1.28.21-1

subscription-manager-1.28.22-1

subscription-manager-1.28.23-1

subscription-manager-1.28.24-1

subscription-manager-1.28.25-1

subscription-manager-1.28.26-1

subscription-manager-1.28.27-1

subscription-manager-1.28.28-1

subscription-manager-1.28.29-1

subscription-manager-1.28.3-1

subscription-manager-1.28.30-1

subscription-manager-1.28.31-1

subscription-manager-1.28.32-1

subscription-manager-1.28.33-1

subscription-manager-1.28.34-1

subscription-manager-1.28.35-1

subscription-manager-1.28.36-1

subscription-manager-1.28.37-1

subscription-manager-1.28.38-1

subscription-manager-1.28.4-1

subscription-manager-1.28.5-1

subscription-manager-1.28.6-1

subscription-manager-1.28.7-1

subscription-manager-1.28.8-1

subscription-manager-1.28.9-1

subscription-manager-1.8.0-1

subscription-manager-1.8.1-1

subscription-manager-1.8.10-1

subscription-manager-1.8.11-1

subscription-manager-1.8.12-1

subscription-manager-1.8.13-1

subscription-manager-1.8.2-1

subscription-manager-1.8.3-1

subscription-manager-1.8.4-1

subscription-manager-1.8.5-1

subscription-manager-1.8.6-1

subscription-manager-1.8.7-1

subscription-manager-1.8.8-1

subscription-manager-1.8.9-1

subscription-manager-1.9.1-1

subscription-manager-1.9.2-1