CVE-2025-2157: Red Hat Satellite 6

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, exposing sensitive command outputs, such as /etc/shadow. This issue can lead to information disclosure and privilege escalation if exploited effectively.

Affected products

• Red Hat Red Hat Satellite 6
• Red Hat Satellite Server: version 6.16 only; version 6.17 only

Published 2025-03-15. Last modified 2026-06-17.