Description
A vulnerability was found in Forklift Controller. There is no verification against the authorization header except to ensure it uses bearer authentication. Without an Authorization header and some form of a Bearer token, a 401 error occurs. The presence of a token value provides a 200 response with the requested information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | forklift-controller | < 2.6.6 | 2.6.6 |
| Red Hat | Migration Toolkit for Virtualization 2.6 | — | — |
Advisories 1
- WID-SEC-2024-2084 Red Hat OpenShift: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Sep 9, 2024
References
- RHSA-2024:6487 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-8509 vdb-entry
- RHBZ#2310406 issue-tracking