CVE-2021-3584

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability of system. Fixed releases are 2.4.1, 2.5.1, 3.0.0.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	foreman	foreman 2.4.1, foreman 2.5.1, foreman 3.0.0

References

https://bugzilla.redhat.com/show_bug.cgi?id=1968439Issue Tracking, Third Party Advisory
https://github.com/theforeman/foreman/pull/8599Issue Tracking, Patch, Third Party Advisory
https://projects.theforeman.org/issues/32753Issue Tracking, Patch, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1968439Issue Tracking, Third Party Advisory
https://github.com/theforeman/foreman/pull/8599Issue Tracking, Patch, Third Party Advisory
https://projects.theforeman.org/issues/32753Issue Tracking, Patch, Vendor Advisory

Timeline

Published: Dec 23, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-35855.5A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-CVE-2021-35869.8A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be acces CVE-2021-35883.3The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index i CVE-2021-35898.0An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can ac CVE-2021-35908.8A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the A CVE-2021-35923.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() funct CVE-2021-35933.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() functi CVE-2021-359365.3If remote logging is not used, the worker (in the case of CeleryExecutor) or the scheduler (in the case of LocalExecutor) runs a Flask loggi CVE-2021-359376.4A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in CVE-2021-359386.7A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unp CVE-2021-359396.7It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the CVE-2021-35943.8An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() functio