https://vulnerability.circl.lu/sightings/feed 2026-05-10T03:01:20.035224+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5cc3331c-7bae-4bab-8b73-f2b4730a12e4/export 2026-05-10T03:01:20.426387+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "5cc3331c-7bae-4bab-8b73-f2b4730a12e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-7012", "type": "seen", "source": "https://t.me/cvedetector/4789", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-7012 - Foreman Apache ModProxy Header Authentication Bypass\", \n \"Content\": \"CVE ID : CVE-2024-7012 \nPublished : Sept. 4, 2024, 2:15 p.m. | 29\u00a0minutes ago \nDescription : An authentication bypass vulnerability has been identified in Foreman when deployed with Gunicorn versions prior to 22.0, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of restrictions on underscores in HTTP headers, allowing authentication through a malformed header. This flaw impacts all active Satellite deployments (6.13, 6.14 and 6.15) and could potentially enable unauthorized users to gain administrative access. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"04 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T16:54:35.000000Z"} 2024-09-04T16:54:35+00:00 https://vulnerability.circl.lu/sighting/8da62041-1ef5-4e54-9473-2fa1a6f331f8/export 2026-05-10T03:01:20.426306+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "8da62041-1ef5-4e54-9473-2fa1a6f331f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-7012", "type": "seen", "source": "https://t.me/CyberBulletin/564", "content": "\u26a1\ufe0fCVE-2024-7012 (CVSS 9.8): Critical Foreman Flaw Exposes Red Hat Satellite to Unauthorized Access.\n\n#CyberBulletin", "creation_timestamp": "2024-09-06T10:58:40.000000Z"} 2024-09-06T10:58:40+00:00 https://vulnerability.circl.lu/sighting/d2ed8dfb-46e6-4301-bcf2-db3b1da855ae/export 2026-05-10T03:01:20.426217+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "d2ed8dfb-46e6-4301-bcf2-db3b1da855ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-7012", "type": "seen", "source": "https://t.me/InfoSecInsider/23686", "content": "\u26a1\ufe0fCVE-2024-7012 (CVSS 9.8): Critical Foreman Flaw Exposes Red Hat Satellite to Unauthorized Access.\n\n#CyberBulletin", "creation_timestamp": "2024-09-06T11:36:41.000000Z"} 2024-09-06T11:36:41+00:00 https://vulnerability.circl.lu/sighting/46eb26bd-22de-4e9d-97b4-b3da1567ad60/export 2026-05-10T03:01:20.426125+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "46eb26bd-22de-4e9d-97b4-b3da1567ad60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-7012", "type": "seen", "source": "https://t.me/InfoSecInsider/207", "content": "\u26a1\ufe0fCVE-2024-7012 (CVSS 9.8): Critical Foreman Flaw Exposes Red Hat Satellite to Unauthorized Access.\n\n#CyberBulletin", "creation_timestamp": "2024-09-06T11:36:44.000000Z"} 2024-09-06T11:36:44+00:00 https://vulnerability.circl.lu/sighting/2db41e23-352d-47f6-8401-727e1a1a8fb3/export 2026-05-10T03:01:20.426000+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "2db41e23-352d-47f6-8401-727e1a1a8fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-7012", "type": "seen", "source": "https://t.me/crackvaultde/44", "content": "A critical authentication bypass vulnerability, CVE-2024-7012, has been identified in Foreman when using External Authentication, affecting all active Red Hat Satellite deployments (versions 6.13, 6.14, and 6.15). The flaw, caused by Apache's mod_proxy mishandling HTTP headers with underscores, could allow unauthorized users to gain administrative access.", "creation_timestamp": "2024-09-06T16:14:01.000000Z"} 2024-09-06T16:14:01+00:00 https://vulnerability.circl.lu/sighting/816d2ea6-fc17-475d-a5ac-663e106223d4/export 2026-05-10T03:01:20.423918+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "816d2ea6-fc17-475d-a5ac-663e106223d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-7012", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/12471", "content": "\u200aCVE-2024-7012 (CVSS 9.8): Critical Foreman Flaw Exposes Red Hat Satellite to Unauthorized Access\n\nhttps://securityonline.info/cve-2024-7012-cvss-9-8-critical-foreman-flaw-exposes-red-hat-satellite-to-unauthorized-access/", "creation_timestamp": "2024-09-08T17:48:02.000000Z"} 2024-09-08T17:48:02+00:00