CVE-2021-3457

Name of the Vulnerable Software and Affected Versions: Foreman (affected versions not specified)

Description: An improper authorization handling flaw was found in Foreman, specifically in the Shellhooks plugin for the smart-proxy. This allows Foreman clients to execute actions that should be limited to the Foreman Server, enabling an authenticated local attacker to access and delete limited resources. The flaw also causes a denial of service on the Foreman server, with the highest threat being to integrity and system availability.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.