CVE-2025-2157

A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, exposing sensitive command outputs, such as /etc/shadow. This issue can lead to information disclosure and privilege escalation if exploited effectively.

Score

CVSS 3.1 3.3 Low

Status

Deferred - secalert@redhat.com

Published

2025-03-15

Last modified

2025-11-21

Weaknesses

CWE-922

Affected products

• Satellite Server (Red Hat)
• Satellite (Redhat)

References

• https://access.redhat.com/security/cve/CVE-2025-2157
• https://bugzilla.redhat.com/show_bug.cgi?id=2351092