« Volver al listado

CVE-2024-7012

Estado: ModificadaCrítica (9.8)—

An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) and could potentially enable unauthorized users to gain administrative access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Redhat — Satellite

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-7012",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-7012",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-23T17:16:24.550968Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secalert@redhat.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Secondary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "22.0",
              "versionType": "semver"
            }
          ],
          "packageName": "puppet-foreman",
          "collectionURL": "https://github.com/theforeman/puppet-foreman",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.13::el8",
            "cpe:/a:redhat:satellite_capsule:6.13::el8",
            "cpe:/a:redhat:satellite_utils:6.13::el8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Satellite 6.13 for RHEL 8",
          "versions": [
            {
              "status": "unaffected",
              "version": "1:3.5.2.8-1.el8sat",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "foreman-installer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.13::el8",
            "cpe:/a:redhat:satellite_capsule:6.13::el8",
            "cpe:/a:redhat:satellite_utils:6.13::el8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Satellite 6.13 for RHEL 8",
          "versions": [
            {
              "status": "unaffected",
              "version": "1:3.5.2.8-1.el8sat",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "foreman-installer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.14::el8",
            "cpe:/a:redhat:satellite_capsule:6.14::el8",
            "cpe:/a:redhat:satellite_utils:6.14::el8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Satellite 6.14 for RHEL 8",
          "versions": [
            {
              "status": "unaffected",
              "version": "1:3.7.0.8-1.el8sat",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "foreman-installer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.14::el8",
            "cpe:/a:redhat:satellite_capsule:6.14::el8",
            "cpe:/a:redhat:satellite_utils:6.14::el8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Satellite 6.14 for RHEL 8",
          "versions": [
            {
              "status": "unaffected",
              "version": "1:3.7.0.8-1.el8sat",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "foreman-installer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.15::el8",
            "cpe:/a:redhat:satellite_utils:6.15::el8",
            "cpe:/a:redhat:satellite_capsule:6.15::el8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Satellite 6.15 for RHEL 8",
          "versions": [
            {
              "status": "unaffected",
              "version": "1:3.9.3.4-1.el8sat",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "foreman-installer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.15::el8",
            "cpe:/a:redhat:satellite_utils:6.15::el8",
            "cpe:/a:redhat:satellite_capsule:6.15::el8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Satellite 6.15 for RHEL 8",
          "versions": [
            {
              "status": "unaffected",
              "version": "1:3.9.3.4-1.el8sat",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "foreman-installer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.16::el9",
            "cpe:/a:redhat:satellite_utils:6.16::el8",
            "cpe:/a:redhat:satellite_maintenance:6.16::el9",
            "cpe:/a:redhat:satellite_utils:6.16::el9",
            "cpe:/a:redhat:satellite:6.16::el8",
            "cpe:/a:redhat:satellite_maintenance:6.16::el8",
            "cpe:/a:redhat:satellite_capsule:6.16::el8",
            "cpe:/a:redhat:satellite_capsule:6.16::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Satellite 6.16 for RHEL 8",
          "versions": [
            {
              "status": "unaffected",
              "version": "1:3.12.0.1-1.el8sat",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "foreman-installer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.16::el9",
            "cpe:/a:redhat:satellite_utils:6.16::el8",
            "cpe:/a:redhat:satellite_maintenance:6.16::el9",
            "cpe:/a:redhat:satellite_utils:6.16::el9",
            "cpe:/a:redhat:satellite:6.16::el8",
            "cpe:/a:redhat:satellite_maintenance:6.16::el8",
            "cpe:/a:redhat:satellite_capsule:6.16::el8",
            "cpe:/a:redhat:satellite_capsule:6.16::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Satellite 6.16 for RHEL 8",
          "versions": [
            {
              "status": "unaffected",
              "version": "1:3.12.0.1-1.el8sat",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "foreman-installer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.16::el9",
            "cpe:/a:redhat:satellite_utils:6.16::el8",
            "cpe:/a:redhat:satellite_maintenance:6.16::el9",
            "cpe:/a:redhat:satellite_utils:6.16::el9",
            "cpe:/a:redhat:satellite:6.16::el8",
            "cpe:/a:redhat:satellite_maintenance:6.16::el8",
            "cpe:/a:redhat:satellite_capsule:6.16::el8",
            "cpe:/a:redhat:satellite_capsule:6.16::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Satellite 6.16 for RHEL 9",
          "versions": [
            {
              "status": "unaffected",
              "version": "1:3.12.0.1-1.el9sat",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "foreman-installer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.16::el9",
            "cpe:/a:redhat:satellite_utils:6.16::el8",
            "cpe:/a:redhat:satellite_maintenance:6.16::el9",
            "cpe:/a:redhat:satellite_utils:6.16::el9",
            "cpe:/a:redhat:satellite:6.16::el8",
            "cpe:/a:redhat:satellite_maintenance:6.16::el8",
            "cpe:/a:redhat:satellite_capsule:6.16::el8",
            "cpe:/a:redhat:satellite_capsule:6.16::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Satellite 6.16 for RHEL 9",
          "versions": [
            {
              "status": "unaffected",
              "version": "1:3.12.0.1-1.el9sat",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "foreman-installer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2024-09-04T14:15:14.570",
  "references": [
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:6335",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:6336",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:6337",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:8906",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/security/cve/CVE-2024-7012",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299429",
      "tags": [
        "Issue Tracking"
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secalert@redhat.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) and could potentially enable unauthorized users to gain administrative access."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad de omisión de autenticación en Foreman cuando se implementa con autenticación externa, debido a la configuración puppet-foreman. Este problema surge porque mod_proxy de Apache no anula los encabezados correctamente debido a las restricciones sobre los guiones bajos en los encabezados HTTP, lo que permite la autenticación a través de un encabezado mal formado. Esta falla afecta a todas las implementaciones de Satellite activas (6.13, 6.14 y 6.15) y podría permitir que usuarios no autorizados obtengan acceso administrativo."
    }
  ],
  "lastModified": "2026-06-17T08:19:11.447",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:satellite:6.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6532CA36-F59B-40E4-A6F6-0776CC4C3F78"
            },
            {
              "criteria": "cpe:2.3:a:redhat:satellite:6.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CA2D218-9A55-4906-A5B8-5E7C4245370F"
            },
            {
              "criteria": "cpe:2.3:a:redhat:satellite:6.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F12DC81-33E9-4693-8636-7A1AD20D5CA1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}