CVE-2024-7012

Description

An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) and could potentially enable unauthorized users to gain administrative access.

Reserved 2024-07-23 | Published 2024-09-04 | Updated 2024-11-24 | Assigner redhat

Problem types

Improper Authentication

Product status

Default status
affected

1:3.5.2.8-1.el8sat before *
unaffected

Default status
affected

1:3.5.2.8-1.el8sat before *
unaffected

Default status
affected

1:3.7.0.8-1.el8sat before *
unaffected

Default status
affected

1:3.7.0.8-1.el8sat before *
unaffected

Default status
affected

1:3.9.3.4-1.el8sat before *
unaffected

Default status
affected

1:3.9.3.4-1.el8sat before *
unaffected

Default status
affected

1:3.12.0.1-1.el8sat before *
unaffected

Default status
affected

1:3.12.0.1-1.el8sat before *
unaffected

Default status
affected

1:3.12.0.1-1.el9sat before *
unaffected

Default status
affected

1:3.12.0.1-1.el9sat before *
unaffected

Timeline

2024-07-23:	Reported to Red Hat.
2024-09-04:	Made public.

References

access.redhat.com/errata/RHSA-2024:6335 (RHSA-2024:6335) vendor-advisory

access.redhat.com/errata/RHSA-2024:6336 (RHSA-2024:6336) vendor-advisory

access.redhat.com/errata/RHSA-2024:6337 (RHSA-2024:6337) vendor-advisory

access.redhat.com/errata/RHSA-2024:8906 (RHSA-2024:8906) vendor-advisory

access.redhat.com/security/cve/CVE-2024-7012 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2299429 (RHBZ#2299429) issue-tracking

cve.org (CVE-2024-7012)

nvd.nist.gov (CVE-2024-7012)

Download JSON