CyberRota Analysis
AI-GeneratedThe vulnerability affects Oracle's endpoint for retrieving cluster objects, which fails to validate tokens properly, allowing attackers to exploit this oversight. Specifically, when a valid cluster ID linked to private registry secrets is accessed, it triggers a nil pointer dereference, resulting in an HTTP 502 Bad Gateway response, while non-existent cluster IDs return an HTTP 200, enabling reliable enumeration of valid cluster IDs. Organizations using Oracle products should prioritize addressing this vulnerability to mitigate potential information disclosure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/private_registry.go causes the request to return HTTP 502 Bad Gateway. For cluster IDs that do not exist, the endpoint returns HTTP 200. This observable difference in response codes constitutes a reliable enumeration oracle.