Vulnerability · Published Oct 24, 2024 · Assigned by redhat

CVE-2024-10295Gateway: apicast basic auth bypass via malformed base64 headerssending non-base64 'basic' auth with special characters causes apicast to incorrectly authenticate a request

High 7.5

In plain English

A high-severity incorrect authorization in gateway. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.4%top 66.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a request. A malformed basic authentication header containing special characters bypasses authentication and allows unauthorized access to the backend. This issue can occur due to a failure in the base64 decoding process, which causes APICast to skip the rest of the authentication checks and proceed with routing the request upstream.

Affected products (as reported)

Vendor	Product	Versions
	gateway	0 – through 2.14.2
Red Hat	Red Hat 3scale API Management Platform 2	see references

Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://access.redhat.com/security/cve/CVE-2024-10295 vdb-entry, x_refsource_REDHAT
RHBZ#2321258 issue-tracking, x_refsource_REDHAT