CVE-2024-8509

highpriority · track · 0EPSS 0.006 · 47 %ileDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.59% (47th) EPSS
CVSS 7.5 · high
Is it mine?
17 products
Check your exposure
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-23

A vulnerability was found in Forklift Controller.  There is no verification against the authorization header except to ensure it uses bearer authentication. Without an Authorization header and some form of a Bearer token, a 401 error occurs. The presence of a token value provides a 200 response with the requested information.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedmigration-toolkit-virtualization/mtv-api-rhel9@sha256:cda740cdef9b4a9b9499204aa231892bb9cde94b983eed889eb31540bbec4373_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:6487
  • Workaroundmigration-toolkit-virtualization/mtv-api-rhel9@sha256:cda740cdef9b4a9b9499204aa231892bb9cde94b983eed889eb31540bbec4373_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:c2cb73fb7cd7a724e1b17038068065f10a9164b60236c54e1c543ed0a797d487_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-controller-rhel9@sha256:fa371a3bd0fa60171d2485e6f62b66d147f88ebee0cb4c661157f90414c591c8_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-must-gather-rhel8@sha256:7dcfaca922b348d8365916b0f13d9b3ccd08b1f22d5ac8b8da8ceec9c5bfbdc9_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:6ceb75952b4e4044bf56e3d4419bee9a250163290fe78cc7241c6a429b350c7c_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-operator-bundle@sha256:4670638d8471f4e3dfc28159a91b408ad197505ef706b99f8f81054ad2fd3c04_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-ova-provider-server-rhel9@sha256:741cc31bfd2c56fdc04629e4edfd962198ebac47d90062c9fef4efd41d4dc31a_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:927034ecda9089f1bab5ad02905ea4c551a23d3817f2ae7cf69dbeb1a2bf459b_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-rhel8-operator@sha256:0512f432ca9acd8b3d0b7e30cb45d4a6cd579ed17be7abd4d5133355a331c703_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-rhv-populator-rhel8@sha256:529fb951862ee47d1610d0311bb1f09f789cd5143ea15e02359b425fca94a9a8_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-validation-rhel9@sha256:209b681a0c380e63dfca572fb622e10e339c8f7178487c9f9d6176e77fdd74a5_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:7502871e7c68c95d584321f3280cf7a370b5c597f580dfd3083b486ca8eb42bf_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundmigration-toolkit-virtualization/mtv-virt-v2v-warm-rhel8@sha256:e71ac315ec8335dade9e4ca7a423053066c21495b1db8710d178d39af9316f23_amd64 as a component of 8Base-MTV-2.6redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

02

cvss

Technical severity, 0–10. One row per scoring source.

7.5
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · secalert@redhat.com USexploitability 3.9 · impact 3.6
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · Red Hat Product Security US
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-285USCWE-285USCWE-285US
05

affected products (17)

Products and version ranges known to be affected.

06

advisories (2)

Vendor and ecosystem advisories describing this.

  • RHSA-2024:6487Red Hat Security Advisory: MTV 2.6.6 Images2024-09-09csaf · redhat_csafUS

    Updated Release packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • WID-SEC-W-2024-2084Red Hat OpenShift: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenDeutsch2024-09-09csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

07

also known as (4)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducert_bundredhat_csafNVDCVE.orgMITRE
published 2024-09-06modified 2026-06-17
09

references (10)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan