Vulnerability Description
A vulnerability was found in Forklift Controller. There is no verification against the authorization header except to ensure it uses bearer authentication. Without an Authorization header and some form of a Bearer token, a 401 error occurs. The presence of a token value provides a 200 response with the requested information.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://access.redhat.com/errata/RHSA-2024:6487
- https://access.redhat.com/security/cve/CVE-2024-8509
- https://bugzilla.redhat.com/show_bug.cgi?id=2310406
FAQ
What is CVE-2024-8509?
CVE-2024-8509 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability was found in Forklift Controller. There is no verification against the authorization header except to ensure it uses bearer authentication. Without an Authorization header and some fo...
How severe is CVE-2024-8509?
CVE-2024-8509 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-8509?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.