CVE-2024-10295

A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a request. A malformed basic authentication header containing special characters bypasses authentication and allows unauthorized access to the backend. This issue can occur due to a failure in the base64 decoding process, which causes APICast to skip the rest of the authentication checks and proceed with routing the request upstream.

• CWE-863
• CWE-863

• https://access.redhat.com/security/cve/CVE-2024-10295Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2321258Issue Tracking, Vendor Advisory

Published

Oct 24, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1029A vulnerability was found in Cogites eReserv 7.7.58 and clas…6.1
• CVE-2024-10290A vulnerability, which was classified as problematic, was fo…7.5
• CVE-2024-10291A vulnerability has been found in ZZCMS 2023 and classified …9.8
• CVE-2024-10292A vulnerability was found in ZZCMS 2023 and classified as cr…9.8
• CVE-2024-10293A vulnerability was found in ZZCMS 2023. It has been classif…9.8
• CVE-2024-10294The CE21 Suite plugin for WordPress is vulnerable to unautho…7.5
• CVE-2024-10296A vulnerability was found in PHPGurukul Medical Card Generat…7.2
• CVE-2024-10297A vulnerability was found in PHPGurukul Medical Card Generat…7.2
• CVE-2024-10298A vulnerability classified as critical has been found in PHP…7.2
• CVE-2024-10299A vulnerability classified as critical was found in PHPGuruk…7.2
• CVE-2024-1030A vulnerability was found in Cogites eReserv 7.7.58. It has …5.4
• CVE-2024-10300A vulnerability, which was classified as critical, has been …7.2