CVE-2024-8509

highPriorität · verfolgen · 0EPSS 0.006 · 47. PerzentilDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.59% (47th) EPSS
CVSS 7.5 · high
Is it mine?
17 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-23

A vulnerability was found in Forklift Controller.  There is no verification against the authorization header except to ensure it uses bearer authentication. Without an Authorization header and some form of a Bearer token, a 401 error occurs. The presence of a token value provides a 200 response with the requested information.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobenmigration-toolkit-virtualization/mtv-api-rhel9@sha256:cda740cdef9b4a9b9499204aa231892bb9cde94b983eed889eb31540bbec4373_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:6487
  • Workaroundmigration-toolkit-virtualization/mtv-api-rhel9@sha256:cda740cdef9b4a9b9499204aa231892bb9cde94b983eed889eb31540bbec4373_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:c2cb73fb7cd7a724e1b17038068065f10a9164b60236c54e1c543ed0a797d487_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-controller-rhel9@sha256:fa371a3bd0fa60171d2485e6f62b66d147f88ebee0cb4c661157f90414c591c8_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-must-gather-rhel8@sha256:7dcfaca922b348d8365916b0f13d9b3ccd08b1f22d5ac8b8da8ceec9c5bfbdc9_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:6ceb75952b4e4044bf56e3d4419bee9a250163290fe78cc7241c6a429b350c7c_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-operator-bundle@sha256:4670638d8471f4e3dfc28159a91b408ad197505ef706b99f8f81054ad2fd3c04_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:741cc31bfd2c56fdc04629e4edfd962198ebac47d90062c9fef4efd41d4dc31a_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:927034ecda9089f1bab5ad02905ea4c551a23d3817f2ae7cf69dbeb1a2bf459b_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-rhel8-operator@sha256:0512f432ca9acd8b3d0b7e30cb45d4a6cd579ed17be7abd4d5133355a331c703_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-rhv-populator-rhel8@sha256:529fb951862ee47d1610d0311bb1f09f789cd5143ea15e02359b425fca94a9a8_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-validation-rhel9@sha256:209b681a0c380e63dfca572fb622e10e339c8f7178487c9f9d6176e77fdd74a5_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:7502871e7c68c95d584321f3280cf7a370b5c597f580dfd3083b486ca8eb42bf_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-virt-v2v-warm-rhel8@sha256:e71ac315ec8335dade9e4ca7a423053066c21495b1db8710d178d39af9316f23_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–7.5

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · secalert@redhat.com USAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · Red Hat Product Security US
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-285USCWE-285USCWE-285US
05

betroffene Produkte (17)

Betroffene Produkte und Versionsbereiche.

06

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2024:6487Red Hat Security Advisory: MTV 2.6.6 Images2024-09-09csaf · redhat_csafUS

    Updated Release packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • WID-SEC-W-2024-2084Red Hat OpenShift: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenDeutsch2024-09-09csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundredhat_csafNVDCVE.orgMITRE
veröffentlicht 2024-09-06geändert 2026-06-17
09

Referenzen (10)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan