Incorrect authorization in subscription-manager (Red Hat package) - CVE-2023-3899

Vulnerability identifier: #VU79878

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-3899

CWE-ID: CWE-863

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect authorization caused by D-Bus interface com.redhat.RHSM1 that exposes a significant number of methods to all users. A local user can abuse the com.redhat.RHSM1.Config.SetAll() method to change the state of the registration and escalate privileges on the system.

subscription-manager (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python-syspurpose
subscription-manager-cockpit
rhsm-gtk
subscription-manager
subscription-manager-gui
subscription-manager-initial-setup-addon
subscription-manager-plugin-container
subscription-manager-plugin-ostree
subscription-manager-rhsm
subscription-manager-rhsm-certificates
Cloud Pak for Network Automation
IBM Cloud Pak for Watson AIOps
Robotic Process Automation for Cloud Pak
Node Health Check Operator
Self Node Remediation Operator
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
Service Telemetry Framework
OpenShift Pipelines
Migration Toolkit for Virtualization
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
OpenShift Logging
Red Hat Migration Toolkit for Applications
IBM Maximo Application Suite
Netcool Operations Insight
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Anolis OS
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Fedora
Juniper Secure Analytics (JSA)
IBM Qradar SIEM
IBM Security Guardium
Operational Decision Manager

Install updates from vendor's website.

subscription-manager (Red Hat package) - addressed in versions 1.29.33.1-2.el9_2, 1.24.52-2.el7_9, 1.25.17.1-2.el8_1, 1.26.22-2.el8_2, 1.28.13-7.el8_4, 1.28.29.1-2.el8_6, 1.28.36-3.el8_8, 1.29.26.2-2.el9_0
Node Health Check Operator - update to 0.4.1
Self Node Remediation Operator - addressed in versions 0.5.1, 0.7.1
Service Telemetry Framework - update to 1.5.2
Migration Toolkit for Containers - addressed in versions 1.7.13, 1.8.0
OpenShift Pipelines - addressed in versions 1.10.6, 1.11.2
Multicluster Engine for Kubernetes - update to 2.3.2
OpenShift Service Mesh - update to 2.4.3
Migration Toolkit for Virtualization - update to 2.4.3
Red Hat Advanced Cluster Management for Kubernetes - update to 2.6.7
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 4.0.5, 4.1.4, 4.2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.0
OpenShift Virtualization - update to 4.11.6
Red Hat OpenShift Container Platform - addressed in versions 4.11.49, 4.13.10
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.13.3
OpenShift Logging - addressed in versions 5.5.16, 5.6.11, 5.7.6
Red Hat Migration Toolkit for Applications - update to 6.1.4
Juniper Secure Analytics (JSA) - update to 7.5.0 UP7 IF02
IBM Qradar SIEM - update to 7.5.0 Update Pack 7 IF02
Netcool Operations Insight - update to 1.6.12
python-syspurpose - update to 1.24.52-2
subscription-manager-cockpit - update to 1.24.52-2
rhsm-gtk - update to 1.24.52-2
subscription-manager - update to 1.24.52-2
subscription-manager-gui - update to 1.24.52-2
subscription-manager-initial-setup-addon - update to 1.24.52-2
subscription-manager-plugin-container - update to 1.24.52-2
subscription-manager-plugin-ostree - update to 1.24.52-2
subscription-manager-rhsm - update to 1.24.52-2
subscription-manager-rhsm-certificates - update to 1.24.52-2
subscription-manager - addressed in versions 1.29.37-1.fc37, 1.29.37-1.fc38
Operational Decision Manager - addressed in versions 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.9, 23.0.10

• https://bugzilla.redhat.com/show_bug.cgi?id=2225407

• Red Hat Enterprise Linux 9 update for subscription-manager
• Red Hat Enterprise Linux 9.0 Extended Update Support update for subscription-manager
• Red Hat Enterprise Linux 8 update for subscription-manager
• Red Hat Enterprise Linux 8.6 Extended Update Support update for subscription-manager
• Red Hat Enterprise Linux 8 update for subscription-manager
• Red Hat Enterprise Linux 8 update for subscription-manager
• Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions update for subscription-manager
• Red Hat Enterprise Linux 7 update for subscription-manager
• Fedora 37 update for subscription-manager
• Fedora 38 update for subscription-manager
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Multiple vulnerabilities in Logging Subsystem for Red Hat OpenShift
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Multiple vulnerabilities in Red Hat OpenShift Virtualization release 4.11
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh Containers 2.4
• Multiple vulnerabilities in OpenShift Virtualization 4.13
• Multiple vulnerabilities in Logging Subsystem 5.5 for Red Hat OpenShift
• Multiple vulnerabilities in Logging Subsystem 5.6 for Red Hat OpenShift
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.3
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.1
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.7
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.0
• Incorrect authorization in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Node Health Check Operator 0.4
• Multiple vulnerabilities in Migration Toolkit for Applications 6.1
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.11
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Security Guardium
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.10
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in IBM Operational Decision Manager
• Incorrect authorization in IBM Maximo Application Suite - Predict Component
• Multiple vulnerabilities in Netcool Operations Insight
• Anolis OS update for subscription-manager