CVE-2024-7923criticalCWE-287

CVE-2024-7923: falha crítica em pulpcore

Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Red Hat Satellite+ Monitorar Red Hat Update Infrastructure 4 for Cloud Providers

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.8%
An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.0, due to the puppet-pulpcore configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) which are using Pulpcore version 3.0+ and could potentially enable unauthorized users to gain administrative access.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
pulpcoreRed Hat · Red Hat Satellite 6.13 for RHEL 8Red Hat · Red Hat Satellite 6.14 for RHEL 8Red Hat · Red Hat Satellite 6.15 for RHEL 8Red Hat · Red Hat Satellite 6.16 for RHEL 8Red Hat · Red Hat Satellite 6.16 for RHEL 9Red Hat · Red Hat Update Infrastructure 4 for Cloud Providers
CVEs relacionadas — pulpcore

No mesmo produto, das mais perigosas para as menos.

CVE-2023-0118CRITICALForeman: arbitrary code execution through templatesEPSS 1.4%CVE-2023-5189MEDIUMHub: insecure galaxy-importer tarfile extractionEPSS 1.0%CVE-2024-7012CRITICALPuppet-foreman: an authentication bypass vulnerability exists in foremanEPSS 0.8%CVE-2023-0119MEDIUMForeman: stored cross-site scripting in host tabEPSS 0.6%CVE-2024-8553MEDIUMForeman: read-only access to entire db from templatesEPSS 0.4%CVE-2023-4886MEDIUMForeman: world readable file containing secretsEPSS 0.3%