CVE-2024-5037 Openshift/telemeter: iss check during jwt authentication can be bypassed

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "4.16",
        "lessThan": "4.17",
        "versionType": "semver"
      }
    ],
    "packageName": "telemeter",
    "collectionURL": "https://github.com/openshift/telemeter",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.12",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift4/ose-telemeter",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v4.12.0-202408071159.p0.gc9592de.assembly.stream.el8",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.12::el8",
      "cpe:/a:redhat:openshift:4.12::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.13",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift4/ose-telemeter",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v4.13.0-202407081338.p0.g0634a6d.assembly.stream.el8",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.13::el8",
      "cpe:/a:redhat:openshift:4.13::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.14",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift4/ose-telemeter",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v4.14.0-202407021509.p0.g1f72681.assembly.stream.el8",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el8",
      "cpe:/a:redhat:openshift:4.14::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.15",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift4/ose-telemeter-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v4.15.0-202406200537.p0.g14489f7.assembly.stream.el9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.15::el8",
      "cpe:/a:redhat:openshift:4.15::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.16",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift4/ose-telemeter-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v4.16.0-202406200537.p0.gc1ecd10.assembly.stream.el9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Logging Subsystem for Red Hat OpenShift",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-logging/opa-openshift-rhel8",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:logging:5"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhosdt/tempo-gateway-opa-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:2"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhosdt/tempo-gateway-opa-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3"
    ]
  }
]