Insights-client: unsafe handling of temporary files and directories

CVE-2023-3972

Summary

A local privilege escalation vulnerability exists in the insights-client due to insecure file operations related to temporary files and directories. If unprivileged users create a specific directory before the insights-client is registered by root, they can set it to be writable. Once registered, an attacker leveraging this misconfiguration can introduce malicious scripts into the insights directory. This manipulation allows them to execute arbitrary code with root privileges, effectively bypassing SELinux protections, as the insights processes can disable SELinux system-wide.

References