CVE-2024-7012 Puppet-foreman: an authentication bypass vulnerability exists in foreman
Attackers can bypass authentication via malformed headers in Foreman with External Authentication, gaining administrative access to Red Hat Satellite deployments.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-7012?
CVE-2024-7012 is a critical authentication bypass vulnerability in Redhat Satellite, published on 4 Sep 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) and could potentially enable unauthorized users to gain administrative access.
Weakness: CWE-287
Which versions are affected by CVE-2024-7012?
It affects 1 product.
Products include Redhat Satellite.
How do I fix CVE-2024-7012?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-7012 being exploited?
There is no known exploitation of CVE-2024-7012 in the wild and no public exploit code.
Other vulnerabilities in Redhat Satellite
- CVE-2024-7923 Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
- CVE-2026-96659 Foreman: excessive permissions for viewer role on preview
- CVE-2023-0118 Foreman: arbitrary code execution through templates
- CVE-2008-2369 Hardcoded credentials in n/a
- CVE-2026-96658 Foreman: foreman: arbitrary code execution via safemode sandbox bypass
Sources
Also known as GHSA-gp3v-m4q9-3v8h.