Lucene search
GoogleOSV:GO-2024-2905HistoryJun 28, 2024 - 3:28 p.m.
Openshift/telemeter: iss check during jwt authentication can be bypassed in github.com/openshift/telemeter
2024-06-2815:28:30
Google
osv.dev
1
openshift telemeter github vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
26.0%
Openshift/telemeter: iss check during jwt authentication can be bypassed in github.com/openshift/telemeter
Related
redhatcve
redhatcve
CVE-2024-5037
2024-06-05 18:01:14
cvelist
cvelist
nvd
nvd
CVE-2024-5037
2024-06-05 18:15:11
veracode
veracode
Authentication Bypass By Spoofing
2024-06-10 13:40:22
cve
cve
CVE-2024-5037
2024-06-05 18:15:11
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
26.0%
Related for OSV:GO-2024-2905