Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-3899

22
FAUCET Score

CVE-2023-3899 is a local privilege escalation vulnerability in subscription-manager, affecting Fedora and Red Hat products. A low-privileged local user can exploit an inadequate authorization flaw in the D-Bus interface com.redhat.RHSM1, specifically through the SetAll() method, to tamper with system registration and entitlements. This allows an attacker to set arbitrary configuration directives in /etc/rhsm/rhsm.conf, leading to unconfined root privilege escalation. Rated 7.8 HIGH on CVSS, the vulnerability has low attack complexity and requires local access, but can result in high impact to confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.28.39CPE matchmatch criteria
cpe:2.3:a:redhat:subscription-manager:*:*:*:*:*:*:*:*
>= 1.29.0, < 1.29.37CPE matchmatch criteria
cpe:2.3:a:redhat:subscription-manager:*:*:*:*:*:*:*:*
37CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
38CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.25%
Probability of exploitation in next 30 days
EPSS Percentile
16.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0025 is in the 51st percentile among its peer group of 16,994 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (13)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: subscription-manager-0:1.29.26.2-2.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: subscription-manager-0:1.24.52-2.el7_9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: subscription-manager-0:1.28.36-3.el8_8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: subscription-manager-0:1.25.17.1-2.el8_1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: subscription-manager-0:1.26.22-2.el8_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: subscription-manager-0:1.26.22-2.el8_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: subscription-manager-0:1.26.22-2.el8_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: subscription-manager-0:1.28.13-7.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: subscription-manager-0:1.28.13-7.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: subscription-manager-0:1.28.13-7.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: subscription-manager-0:1.28.29.1-2.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: subscription-manager-0:1.29.33.1-2.el9_2
View patch
redhatvendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2023-3899Important

subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration

Aug 22, 2023

References

lists.fedoraproject.org / archives/list/[email protected]/message/FJHKSBBZRDFOBNDU35FUKMYQIQYT6UJQ
lists.fedoraproject.org / archives/list/[email protected]/message/ZDIHGNLS3TZVX7X2F735OKI4KXPY4AH6
access.redhat.com / errata/RHSA-2023:4701
Vendor Advisory
access.redhat.com / errata/RHSA-2023:4702
Vendor Advisory
access.redhat.com / errata/RHSA-2023:4703
Vendor Advisory
access.redhat.com / errata/RHSA-2023:4704
Vendor Advisory
access.redhat.com / errata/RHSA-2023:4705
Vendor Advisory
access.redhat.com / errata/RHSA-2023:4706
Vendor Advisory
access.redhat.com / errata/RHSA-2023:4707
Vendor Advisory
access.redhat.com / errata/RHSA-2023:4708
Vendor Advisory
access.redhat.com / security/cve/CVE-2023-3899
Vendor Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingVendor Advisory