TI-2024-09540 Aliases CVE-2024-10295 GHSA-qh7g-57ww-6fq4

Incorrect authorization in gateway

MEDIUM 41CWE-863Published 2024-10-24 · Updated 2026-11-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · None · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-863.

Summary

A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a request. A malformed basic authentication header containing special characters bypasses authentication and allows unauthorized access to the backend. This issue can occur due to a failure in the base64 decoding process, which causes APICast to skip the rest of the authentication checks and proceed with routing the request upstream.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00393 33rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	gateway	up to 2.14.2	—	No fix listed	CNA
Red Hat	Red Hat 3scale API Management Platform 2	—	—	No fix listed	CNA

gateway Vendor— Affected up to 2.14.2 Fixed in — No fix listed CNA
Red Hat 3scale API Management Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:redhat:3scale_api_management:2.0:::::::*	2.0	Vulnerable	Red Hat

cpe:2.3:a:redhat:3scale_api_management:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Red Hat

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat 3scale API Management Platform 2	Affected	No fix yet

Timeline

2026-10-02 Threatist record created from CVE-2024-10295
2026-10-03 Alias added: GHSA-qh7g-57ww-6fq4
2026-11-04 Affected versions changed · CNA

References

Advisory 2

TI-2026-34281 JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection CVSS 3.1HIGH 7.5
TI-2023-04521 3scale-admin-portal: logged out users tokens can be accessed CVSS 3.1MEDIUM 5.5
TI-2022-01295 Improper input validation in 3scale-amp-system CVSS 3.1HIGH 8.8
TI-2021-02598 Missing authorization in KVM CVSS 3.1HIGH 8.8
TI-2019-07536 In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its… CVSS 3.1HIGH 7.8
TI-2022-00257 A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver… CVSS 3.1HIGH 7.8

See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences