CVE-2024-7923

CVE-2024-7923 is a critical authentication bypass vulnerability in Pulpcore, specifically when deployed with Gunicorn versions prior to 22.0 and the puppet-pulpcore configuration. This flaw, stemming from Apache's mod_proxy not properly unsetting headers due to underscore restrictions, allows unauthorized users to gain administrative access to affected Red Hat Satellite deployments (versions 6.13, 6.14, and 6.15) utilizing Pulpcore 3.0+. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered some community discussion, indicating awareness within the cybersecurity community.