CVE-2024-7012: Puppet-foreman: an authentication bypass vulnerability exists in foreman
An authentication bypass vulnerability exists in Foreman due to Pulpcore when deployed with Gunicorn versions earlier than 22.0. The issue arises from how Apache’s modproxy handles header as it fails to unset it properly due to restrictions on underscores in HTTP headers. This allow authentication through malformed header instead. This flaw affects all Katello/Satellite 6.10+ deployments using Pulpcore from version 4.0+ and could potentially allow unauthorized users to gain admin access.
Other sources
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's modproxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) and could potentially enable unauthorized users to gain administrative access.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7012?
The severity of CVE-2024-7012 is considered high due to its potential for authentication bypass.
How do I fix CVE-2024-7012?
To fix CVE-2024-7012, upgrade to Gunicorn version 22.0 or later.
Which versions of Red Hat Satellite are affected by CVE-2024-7012?
CVE-2024-7012 affects Red Hat Satellite versions 6.13, 6.14, and 6.15.
What is the cause of CVE-2024-7012?
CVE-2024-7012 is caused by how Apache’s mod_proxy improperly handles HTTP headers, leading to authentication bypass.
Is there a workaround for CVE-2024-7012?
Currently, the recommended solution is to upgrade Gunicorn; there are no documented workarounds for CVE-2024-7012.