CVE-2024-6861 Vulnerability Details

  /     /     /  

CVE-2024-6861 Metadata Quick Info

CVE Published: 06/11/2024 | CVE Updated: 22/11/2024 | CVE Year: 2024
Source: redhat | Vendor: | Product:
Status : PUBLISHED

---

CVE-2024-6861 Description

A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product\'s API.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-200
CWE Name: Exposure of Sensitive Information to an Unauthorized Actor
Source:

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).