CVE-2024-4871
Foreman: host ssh key not being checked in remote execution
- Published
- Updated
- Reserved
- Assigned by
- redhat
Description
A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker's ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| redhatCNA (assigner) | 3.1 | Medium6.8 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N |
| NVDNVD · Deferred | 3.1 | Medium6.8 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N |
- EPSS (exploitation in 30 days)
- 0.61% · top 51% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.
Weakness
Affected products
foreman
- affected 3.9.1.8
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:4.3.14-1.el8sat – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:3.9.1.8-1.el8sat – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 1:3.9.3.2-1.el8sat – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:2.16.9-1.el8pc – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:3.39.15-1.el8pc – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:1.8.3-1.el8sat – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:13.0.6-1.el8sat – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:12.0.7-1.el8sat – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:4.11.0.15-1.el8sat – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:3.0.0-1.el8sat – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:0.10.6-1.el8sat – < *
Red Hat · Red Hat Satellite 6.15 for RHEL 8
- unaffected 0:6.15.2-1.el8sat – < *
What to do
Workaround: Currently there is no mitigation available for this vulnerability. Please perform the necessary updates as they become available.
References (3)
- RHBA-2024:4589 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-4871 (opens in a new tab)vdb-entryx_refsource_REDHATx_transferred
- RHBZ#2278627 (opens in a new tab)issue-trackingx_refsource_REDHATx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2024-4871)Record last updated .