CVE-2024-6861 Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api
Attackers can retrieve sensitive admin authentication keys via the GraphQL API if introspection is enabled, potentially compromising the entire product API.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-6861?
CVE-2024-6861 is a high-severity vulnerability in Red Hat Satellite 6, published on 6 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API.
Weakness: CWE-200
Which versions are affected by CVE-2024-6861?
How do I fix CVE-2024-6861?
Apply the vendor's patch.
Is CVE-2024-6861 being exploited?
There is no known exploitation of CVE-2024-6861 in the wild and no public exploit code.
Sources
Also known as GHSA-q5h7-2qmh-rxhr.