Lucene search

RedhatCVE-2024-7012

HistorySep 04, 2024 - 2:15 p.m.

CVE-2024-7012

2024-09-0414:15:14

CWE-287

redhat

web.nvd.nist.gov

foreman

external authentication

apache

mod_proxy

http headers

satellite deployments.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

30.0%

JSON

An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache’s mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) and could potentially enable unauthorized users to gain administrative access.

Affected configurations

Nvd

Node

redhatsatelliteMatch6.13

redhatsatelliteMatch6.14

redhatsatelliteMatch6.15

VendorProductVersionCPE
redhatsatellite6.13cpe:2.3:a:redhat:satellite:6.13:*:*:*:*:*:*:*
redhatsatellite6.14cpe:2.3:a:redhat:satellite:6.14:*:*:*:*:*:*:*
redhatsatellite6.15cpe:2.3:a:redhat:satellite:6.15:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	satellite	6.13	cpe:2.3:a:redhat:satellite:6.13:::::::*
redhat	satellite	6.14	cpe:2.3:a:redhat:satellite:6.14:::::::*
redhat	satellite	6.15	cpe:2.3:a:redhat:satellite:6.15:::::::*

CNA Affected

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.13 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman-installer",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:3.5.2.8-1.el8sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.13::el8",
      "cpe:/a:redhat:satellite_utils:6.13::el8",
      "cpe:/a:redhat:satellite_capsule:6.13::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.13 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman-installer",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:3.5.2.8-1.el8sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.13::el8",
      "cpe:/a:redhat:satellite_utils:6.13::el8",
      "cpe:/a:redhat:satellite_capsule:6.13::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.14 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman-installer",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:3.7.0.8-1.el8sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.14::el8",
      "cpe:/a:redhat:satellite_capsule:6.14::el8",
      "cpe:/a:redhat:satellite_utils:6.14::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.14 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman-installer",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:3.7.0.8-1.el8sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite:6.14::el8",
      "cpe:/a:redhat:satellite_capsule:6.14::el8",
      "cpe:/a:redhat:satellite_utils:6.14::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.15 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman-installer",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:3.9.3.4-1.el8sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite_utils:6.15::el8",
      "cpe:/a:redhat:satellite_capsule:6.15::el8",
      "cpe:/a:redhat:satellite:6.15::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Satellite 6.15 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "foreman-installer",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:3.9.3.4-1.el8sat",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:satellite_utils:6.15::el8",
      "cpe:/a:redhat:satellite_capsule:6.15::el8",
      "cpe:/a:redhat:satellite:6.15::el8"
    ]
  }
]

References

access.redhat.com/errata/RHSA-2024:6335

access.redhat.com/errata/RHSA-2024:6336

access.redhat.com/errata/RHSA-2024:6337

access.redhat.com/security/cve/CVE-2024-7012

bugzilla.redhat.com/show_bug.cgi?id=2299429

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

30.0%

JSON

Related for CVE-2024-7012