CVE-2024-7012criticalCWE-287

CVE-2024-7012: falha crítica em puppet-foreman

Puppet-foreman: an authentication bypass vulnerability exists in foreman

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Red Hat Satellite+ Monitorar puppet-foreman

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.8%
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) and could potentially enable unauthorized users to gain administrative access.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
puppet-foremanRed Hat · Red Hat Satellite 6.13 for RHEL 8Red Hat · Red Hat Satellite 6.14 for RHEL 8Red Hat · Red Hat Satellite 6.15 for RHEL 8Red Hat · Red Hat Satellite 6.16 for RHEL 8Red Hat · Red Hat Satellite 6.16 for RHEL 9
CVEs relacionadas — puppet-foreman

No mesmo produto, das mais perigosas para as menos.

CVE-2023-0118CRITICALForeman: arbitrary code execution through templatesEPSS 1.4%CVE-2023-5189MEDIUMHub: insecure galaxy-importer tarfile extractionEPSS 1.0%CVE-2024-7923CRITICALPuppet-pulpcore: an authentication bypass vulnerability exists in pulpcoreEPSS 0.8%CVE-2023-0119MEDIUMForeman: stored cross-site scripting in host tabEPSS 0.6%CVE-2024-8553MEDIUMForeman: read-only access to entire db from templatesEPSS 0.4%CVE-2023-4886MEDIUMForeman: world readable file containing secretsEPSS 0.3%