Lucene search
K

17 matches found

RedHat Linux
RedHat Linux
added 2026/03/26 8:30 p.m.6 views

rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.8CVSS7.7AI score0.00771EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2026/03/26 8:28 p.m.6 views

rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.8CVSS7.7AI score0.00771EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2026/03/26 7:47 p.m.6 views

rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.8CVSS6.5AI score0.00771EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/03/26 12:0 a.m.7 views

RHEL 9 : Satellite 6.17.7 Async Update (Important) (RHSA-2026:5970)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:5970 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to...

10CVSS7.2AI score0.03204EPSS
Exploits3References31
Tenable Nessus
Tenable Nessus
added 2026/03/26 12:0 a.m.7 views

RHEL 9 : Satellite 6.18.4 Async Update (Important) (RHSA-2026:5968)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:5968 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to...

10CVSS7AI score0.01377EPSS
Exploits3References24
Tenable Nessus
Tenable Nessus
added 2026/03/26 12:0 a.m.5 views

RHEL 8 / 9 : Satellite 6.16.7 Async Update (Important) (RHSA-2026:5971)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:5971 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessit...

10CVSS7.4AI score0.03204EPSS
Exploits3References27
OSV
OSV
added 2026/02/27 9:30 a.m.3 views

GHSA-HFCP-477W-3WJW rubyipmi is vulnerable to OS Command Injection through malicious usernames

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.3CVSS6.5AI score0.00771EPSS
Exploits0References9
EUVD
EUVD
added 2026/02/27 9:30 a.m.3 views

EUVD-2026-9006

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.3CVSS6.5AI score0.00771EPSS
Exploits0References3
Snyk
Snyk
added 2026/02/27 9:30 a.m.2 views

Command Injection

Overview rubyipmi is a Controls IPMI devices via command line wrapper for ipmitool and freeipmi Affected versions of this package are vulnerable to Command Injection via the username parameter in the BMC interface. An attacker can execute arbitrary system commands by supplying a specially crafted...

8.8CVSS6.2AI score0.00771EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/02/27 9:30 a.m.8 views

rubyipmi is vulnerable to OS Command Injection through malicious usernames

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.8CVSS6.5AI score0.00771EPSS
Exploits0References9Affected Software1
OSV
OSV
added 2026/02/27 8:17 a.m.5 views

CVE-2026-0980

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.8CVSS6.4AI score0.00771EPSS
Exploits0References2
NVD
NVD
added 2026/02/27 8:17 a.m.8 views

CVE-2026-0980

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.8CVSS0.00771EPSS
Exploits0References5
CVE
CVE
added 2026/02/27 7:30 a.m.17 views

CVE-2026-0980

The CVE-2026-0980 issue involves the rubyipmi gem used by Red Hat Satellite’s BMC component. Affected component: rubyipmi (BMC interface). Underlying cause: authenticated attacker with host creation or update permissions can craft a malicious username to trigger remote code execution (RCE) on the...

8.8CVSS6.5AI score0.00771EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/27 7:30 a.m.4 views

CVE-2026-0980 Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.3CVSS6.3AI score0.00771EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/27 7:30 a.m.21 views

CVE-2026-0980 Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.3CVSS0.00771EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/02/27 12:0 a.m.4 views

PT-2026-22312

Name of the Vulnerable Software and Affected Versions rubyipmi affected versions not specified Description A flaw exists in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker possessing host creation or update permissions can...

8.3CVSS6.8AI score0.00771EPSS
Exploits0References13
RubySec
RubySec
added 2026/02/27 12:0 a.m.9 views

rubyipmi is vulnerable to OS Command Injection through malicious usernames

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.8CVSS6.5AI score0.00771EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder