Nixpkgs Security Tracker

Untriaged

Permalink CVE-2024-12840

5.0 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): HIGH
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): LOW
Availability impact (A): NONE

created 6 months ago

Http proxies: satellite: service side request forgery in http proxies

A server-side request forgery exists in Satellite. When a PUT HTTP request is made to /http_proxies/test_connection, when supplied with the http_proxies variable set to localhost, the attacker can fetch the localhost banner.

References

https://access.redhat.com/security/cve/CVE-2024-12840 x_refsource_REDHAT vdb-entry
RHBZ#2333494 issue-tracking x_refsource_REDHAT

Affected products

security

Matching in nixpkgs

pkgs.job-security

Job control from anywhere

nixos-unstable -
- nixpkgs-unstable 0-unstable-2024-04-07

pkgs.libmodsecurity

ModSecurity v3 library component.

nixos-unstable -
- nixpkgs-unstable 3.0.14

pkgs.paretosecurity

Agent that makes sure your laptop is correctly configured for security

nixos-unstable -
- nixpkgs-unstable 0.3.4

pkgs.xml-security-c

C++ Implementation of W3C security standards for XML

nixos-unstable -
- nixpkgs-unstable 3.0.0

pkgs.modsecurity-crs

The OWASP ModSecurity Core Rule Set is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls.

nixos-unstable -
- nixpkgs-unstable 3.3.4

pkgs.modsecurity_standalone

Open source, cross-platform web application firewall (WAF)

nixos-unstable -
- nixpkgs-unstable 2.9.12

pkgs.converged-security-suite

Converged Security Suite for Intel & AMD platform security features

nixos-unstable -
- nixpkgs-unstable 2.8.1

pkgs.python312Packages.zope-security

Zope Security Framework

nixos-unstable -
- nixpkgs-unstable 7.3

pkgs.python313Packages.zope-security

Zope Security Framework

nixos-unstable -
- nixpkgs-unstable 7.3

pkgs.haskellPackages.hackage-security

Hackage security library

nixos-unstable -
- nixpkgs-unstable 0.6.3.1

pkgs.python312Packages.flask-security

Quickly add security features to your Flask application

nixos-unstable -
- nixpkgs-unstable 5.6.2

pkgs.python313Packages.flask-security

Quickly add security features to your Flask application

nixos-unstable -
- nixpkgs-unstable 5.6.2

pkgs.python312Packages.securityreporter

Python wrapper for the Reporter API

nixos-unstable -
- nixpkgs-unstable 1.2.0

pkgs.python313Packages.securityreporter

Python wrapper for the Reporter API

nixos-unstable -
- nixpkgs-unstable 1.2.0

pkgs.haskellPackages.amazonka-securityhub

Amazon SecurityHub SDK

nixos-unstable -
- nixpkgs-unstable 2.0

pkgs.haskellPackages.gogol-securitycenter

Google Security Command Center SDK

nixos-unstable -
- nixpkgs-unstable 1.0.0

pkgs.haskellPackages.amazonka-securitylake

Amazon Security Lake SDK

nixos-unstable -
- nixpkgs-unstable 2.0

pkgs.haskellPackages.hackage-security-HTTP

Hackage security bindings against the HTTP library

nixos-unstable -
- nixpkgs-unstable 0.1.1.2

pkgs.haskellPackages.unicode-data-security

Unicode security mechanisms database

nixos-unstable -
- nixpkgs-unstable 0.4.0

pkgs.python312Packages.azure-mgmt-security

Microsoft Azure Security Center Management Client Library for Python

nixos-unstable -
- nixpkgs-unstable 7.0.0

pkgs.python313Packages.azure-mgmt-security

Microsoft Azure Security Center Management Client Library for Python

nixos-unstable -
- nixpkgs-unstable 7.0.0

pkgs.haskellPackages.gogol-websecurityscanner

Google Web Security Scanner SDK

nixos-unstable -
- nixpkgs-unstable 1.0.0

pkgs.python312Packages.mypy-boto3-securityhub

Type annotations for boto3 securityhub

nixos-unstable -
- nixpkgs-unstable boto3-securityhub-1.40.26

pkgs.python313Packages.mypy-boto3-securityhub

Type annotations for boto3 securityhub

nixos-unstable -
- nixpkgs-unstable boto3-securityhub-1.40.26

pkgs.python312Packages.mypy-boto3-securitylake

Type annotations for boto3 securitylake

nixos-unstable -
- nixpkgs-unstable boto3-securitylake-1.40.0

pkgs.python313Packages.mypy-boto3-securitylake

Type annotations for boto3 securitylake

nixos-unstable -
- nixpkgs-unstable boto3-securitylake-1.40.0

pkgs.pantheon.switchboard-plug-security-privacy

Switchboard Security & Privacy Plug

nixos-unstable -
- nixpkgs-unstable 8.0.1

pkgs.python312Packages.google-cloud-securitycenter

Cloud Security Command Center API API client library

nixos-unstable -
- nixpkgs-unstable 1.39.0

pkgs.python313Packages.google-cloud-securitycenter

Cloud Security Command Center API API client library

nixos-unstable -
- nixpkgs-unstable 1.39.0

pkgs.azure-cli-extensions.hardware-security-modules

Microsoft Azure Command-Line Tools AzureDedicatedHSMResourceProvider Extension

nixos-unstable -
- nixpkgs-unstable 0.2.0

pkgs.python312Packages.mypy-boto3-codeguru-security

Type annotations for boto3 codeguru-security

nixos-unstable -
- nixpkgs-unstable boto3-codeguru-security-1.40.17

pkgs.python313Packages.mypy-boto3-codeguru-security