CVE & CISA-KEV CatalogNVD
CVE-2024-8509
HIGH7.5
CVSS v3
Description
A vulnerability was found in Forklift Controller. There is no verification against the authorization header except to ensure it uses bearer authentication. Without an Authorization header and some form of a Bearer token, a 401 error occurs. The presence of a token value provides a 200 response with the requested information.
How to fix
Remediation Available
migration-toolkit-virtualization/mtvRed Hat / RHEL
Fixed in:api-rhel9@sha256:cda740cdef9b4a9b9499204aa231892bb9cde94b983eed889eb31540bbec4373_amd64RHSA-2024:6487
Fixed in:controller-rhel9@sha256:fa371a3bd0fa60171d2485e6f62b66d147f88ebee0cb4c661157f90414c591c8_amd64RHSA-2024:6487
Fixed in:operator-bundle@sha256:4670638d8471f4e3dfc28159a91b408ad197505ef706b99f8f81054ad2fd3c04_amd64RHSA-2024:6487
Fixed in:rhel8-operator@sha256:0512f432ca9acd8b3d0b7e30cb45d4a6cd579ed17be7abd4d5133355a331c703_amd64RHSA-2024:6487
Fixed in:validation-rhel9@sha256:209b681a0c380e63dfca572fb622e10e339c8f7178487c9f9d6176e77fdd74a5_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtvRocky
Fixed in:api-rhel9@sha256:cda740cdef9b4a9b9499204aa231892bb9cde94b983eed889eb31540bbec4373_amd64RHSA-2024:6487
Fixed in:controller-rhel9@sha256:fa371a3bd0fa60171d2485e6f62b66d147f88ebee0cb4c661157f90414c591c8_amd64RHSA-2024:6487
Fixed in:operator-bundle@sha256:4670638d8471f4e3dfc28159a91b408ad197505ef706b99f8f81054ad2fd3c04_amd64RHSA-2024:6487
Fixed in:rhel8-operator@sha256:0512f432ca9acd8b3d0b7e30cb45d4a6cd579ed17be7abd4d5133355a331c703_amd64RHSA-2024:6487
Fixed in:validation-rhel9@sha256:209b681a0c380e63dfca572fb622e10e339c8f7178487c9f9d6176e77fdd74a5_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-consoleRocky
Fixed in:plugin-rhel9@sha256:c2cb73fb7cd7a724e1b17038068065f10a9164b60236c54e1c543ed0a797d487_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-consoleRed Hat / RHEL
Fixed in:plugin-rhel9@sha256:c2cb73fb7cd7a724e1b17038068065f10a9164b60236c54e1c543ed0a797d487_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-mustRocky
Fixed in:gather-rhel8@sha256:7dcfaca922b348d8365916b0f13d9b3ccd08b1f22d5ac8b8da8ceec9c5bfbdc9_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-mustRed Hat / RHEL
Fixed in:gather-rhel8@sha256:7dcfaca922b348d8365916b0f13d9b3ccd08b1f22d5ac8b8da8ceec9c5bfbdc9_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-openstackRed Hat / RHEL
Fixed in:populator-rhel9@sha256:6ceb75952b4e4044bf56e3d4419bee9a250163290fe78cc7241c6a429b350c7c_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-openstackRocky
Fixed in:populator-rhel9@sha256:6ceb75952b4e4044bf56e3d4419bee9a250163290fe78cc7241c6a429b350c7c_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-ova-providerRocky
Fixed in:server-rhel9@sha256:741cc31bfd2c56fdc04629e4edfd962198ebac47d90062c9fef4efd41d4dc31a_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-ova-providerRed Hat / RHEL
Fixed in:server-rhel9@sha256:741cc31bfd2c56fdc04629e4edfd962198ebac47d90062c9fef4efd41d4dc31a_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-populatorRed Hat / RHEL
Fixed in:controller-rhel9@sha256:927034ecda9089f1bab5ad02905ea4c551a23d3817f2ae7cf69dbeb1a2bf459b_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-populatorRocky
Fixed in:controller-rhel9@sha256:927034ecda9089f1bab5ad02905ea4c551a23d3817f2ae7cf69dbeb1a2bf459b_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-rhvRocky
Fixed in:populator-rhel8@sha256:529fb951862ee47d1610d0311bb1f09f789cd5143ea15e02359b425fca94a9a8_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-rhvRed Hat / RHEL
Fixed in:populator-rhel8@sha256:529fb951862ee47d1610d0311bb1f09f789cd5143ea15e02359b425fca94a9a8_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-virtRocky
Fixed in:v2v-rhel9@sha256:7502871e7c68c95d584321f3280cf7a370b5c597f580dfd3083b486ca8eb42bf_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-virtRed Hat / RHEL
Fixed in:v2v-rhel9@sha256:7502871e7c68c95d584321f3280cf7a370b5c597f580dfd3083b486ca8eb42bf_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-virt-v2vRed Hat / RHEL
Fixed in:warm-rhel8@sha256:e71ac315ec8335dade9e4ca7a423053066c21495b1db8710d178d39af9316f23_amd64RHSA-2024:6487
migration-toolkit-virtualization/mtv-virt-v2vRocky
Fixed in:warm-rhel8@sha256:e71ac315ec8335dade9e4ca7a423053066c21495b1db8710d178d39af9316f23_amd64RHSA-2024:6487
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploit Intelligence
0.59%probability of exploitation in 30 days
44thpercentile
Moderate risk: more likely to be exploited than 44% of all known CVEs.
References
Other references3
Related Vulnerabilities
Other CWE-285 vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2025-29927 | Critical | 9.1 | 100% | - | Fix |
| CVE-2021-28799 | Critical | 10.0 | 78% | KEV + Ransom | Fix |
| CVE-2023-32707 | High | 8.8 | 74% | - | Fix |
| CVE-2023-48241 | High | 7.5 | 73% | - | Fix |
| CVE-2023-22480 | High | 7.3 | 67% | - | Fix |
| CVE-2022-3229 | Critical | 9.8 | 66% | - | - |
Embed a live status badge for CVE-2024-8509
Markdown
[](https://tridentstack.com/cve/CVE-2024-8509)HTML
<a href="https://tridentstack.com/cve/CVE-2024-8509"><img src="https://tridentstack.com/cve/badge/CVE-2024-8509.svg" alt="CVE-2024-8509"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-09-09.