Medium severity · published May 14, 2024
CVE-2024-4871
Foreman: host ssh key not being checked in remote execution
6.8
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker's ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat Satellite 6.15 for RHEL 8 · Red Hat
All versions, or not specified · source: vendor
Affected product
RH
Red Hat Satellite 6.15 for RHEL 8
Red Hat
More from Red Hat Satellite 6.15 for RHEL 8
9.8
CVE-2024-7923
Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
9.8
CVE-2024-7012
Puppet-foreman: an authentication bypass vulnerability exists in foreman
8.0
CVE-2025-10622
Foreman: os command injection via ct_location and fcct_location parameters
6.5
CVE-2025-9572
Foreman: satellite: graphql api permission bypass leads to information disclosure
6.3
CVE-2024-8553
Foreman: read-only access to entire db from templates