CVE-2024-6861: Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api
A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API.
Other sources
A flaw was found in foreman before version 3.3. The server exposes a GraphQL API with limited access. If introspection is enabled (usually by default), it allow attackers to query a settings type without any authentication and retrieve the product settings, including the OAuth consumerkey and OAuth consumersecret properties. These elements can be used to authenticate as foremanapiadmin and gain full control of the product's REST API.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6861?
CVE-2024-6861 is classified as a high severity vulnerability due to the exposure of sensitive admin authentication keys.
How do I fix CVE-2024-6861?
To fix CVE-2024-6861, disable the GraphQL API introspection feature if it is enabled.
What kind of information is leaked by CVE-2024-6861?
CVE-2024-6861 can lead to the disclosure of sensitive admin authentication keys.
Which versions of Foreman are affected by CVE-2024-6861?
CVE-2024-6861 affects versions of Foreman up to, but not including, 3.3.
What are the potential consequences of CVE-2024-6861?
The potential consequences of CVE-2024-6861 include a complete compromise of the product's API.