Threats Tagged 'cve-2025-10622'

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters (CVE-2025-59830) * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion (CVE-2025-61919) * foreman: OS command injection via ct_location and fcct_location parameters (CVE-2025-10622) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * Host registration shows no errors even when built submission fails at the end of Global Registration process * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion (CVE-2025-61919) * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters (CVE-2025-59830) * foreman: OS command injection via ct_location and fcct_location parameters (CVE-2025-10622) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion (CVE-2025-61919) * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters (CVE-2025-59830) * foreman: OS command injection via ct_location and fcct_location parameters (CVE-2025-10622)

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve#cve-2025-10622

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * foreman: OS command injection via ct_location and fcct_location parameters (CVE-2025-10622) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.