Local Users Can Execute with Root Permissions by Invoking instance_eval with DRb
Issue
- A non-root user can run commands as root via ruby module drb
- Non-root users can invoke the instance_eval method to run commands as root
Environment
- Red Hat CloudForms 4.2 (CFME 5.7)
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.