CVE-2021-3469

State: Published
Severity: Not scored
Published: Jun 3, 2021
Updated: Aug 3, 2024
Reserved: Mar 26, 2021

Description

Foreman versions before 2.3.4 and before 2.4.0 is affected by an improper authorization handling flaw. An authenticated attacker can impersonate the foreman-proxy if product enable the Puppet Certificate authority (CA) to sign certificate requests that have subject alternative names (SANs). Foreman do not enable SANs by default and `allow-authorization-extensions` is set to `false` unless user change `/etc/puppetlabs/puppetserver/conf.d/ca.conf` configuration explicitly.

Scores

The record has no CVSS score.

Weaknesses

CWE-863

Affected Products

Product	Versions
Foremann/a	foreman 2.3.4, foreman 2.4.0Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1943630

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.