Foreman: host ssh key not being checked in remote execution

Description

A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker's ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.

Timeline

Scores

EPSS (exploitation in 30 days)

0.61% · top 50% of all CVEs (11 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.

Affected products

• foreman

  • affected 3.9.1.8

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:4.3.14-1.el8sat – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:3.9.1.8-1.el8sat – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 1:3.9.3.2-1.el8sat – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:2.16.9-1.el8pc – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:3.39.15-1.el8pc – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:1.8.3-1.el8sat – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:13.0.6-1.el8sat – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:12.0.7-1.el8sat – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:4.11.0.15-1.el8sat – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:3.0.0-1.el8sat – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:0.10.6-1.el8sat – < *

• Red Hat · Red Hat Satellite 6.15 for RHEL 8

  • unaffected 0:6.15.2-1.el8sat – < *

What to do

Workaround: Currently there is no mitigation available for this vulnerability. Please perform the necessary updates as they become available.

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2024-44561 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2024-4871](https://cveledger.app/badge/CVE-2024-4871.svg)](https://cveledger.app/cve/CVE-2024-4871)

Record last updated 25 Feb 2026, 20:31 UTC.