CVE-2024-8509 — Migration toolkit for virtualization: forklift-controller: empty bearer token may perform authentication

CVE-2024-8509

Migration toolkit for virtualization: forklift-controller: empty bearer token may perform authentication PUBLISHED

Description (CNA)

A vulnerability was found in Forklift Controller. There is no verification against the authorization header except to ensure it uses bearer authentication. Without an Authorization header and some form of a Bearer token, a 401 error occurs. The presence of a token value provides a 200 response with the requested information.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 0 before 2.6.6
Red Hat / Migration Toolkit for Virtualization 2.6	unaffected 2.6.6-2 before *

CWE

CWE-285

References

https://access.redhat.com/errata/RHSA-2024:6487
https://access.redhat.com/security/cve/CVE-2024-8509
https://bugzilla.redhat.com/show_bug.cgi?id=2310406

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.