High severity7.2NVD Advisory· Published Dec 23, 2021· Updated Jun 17, 2026
CVE-2021-3584
CVE-2021-3584
Description
A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability of system. Fixed releases are 2.4.1, 2.5.1, 3.0.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2before 2.4.1, before 2.5.1, before 3.0.0+ 1 more
- (no CPE)range: before 2.4.1, before 2.5.1, before 3.0.0
- (no CPE)range: foreman 2.4.1, foreman 2.5.1, foreman 3.0.0
Patches
Vulnerability mechanics
References
3- github.com/theforeman/foreman/pull/8599nvdIssue TrackingPatchThird Party Advisory
- projects.theforeman.org/issues/32753nvdIssue TrackingPatchVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.