Lucene search
Redhat.comRH:CVE-2024-5037HistoryJun 05, 2024 - 6:01 p.m.
CVE-2024-5037
2024-06-0518:01:14
redhat.com
access.redhat.com
2
openshift
telemeter
forged token
bypass
jwt authentication
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
26.0%
A flaw was found in OpenShift’s Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue (“iss”) check during JSON web token (JWT) authentication.
Related
cvelist
cvelist
nvd
nvd
CVE-2024-5037
2024-06-05 18:15:11
veracode
veracode
Authentication Bypass By Spoofing
2024-06-10 13:40:22
cve
cve
CVE-2024-5037
2024-06-05 18:15:11
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
26.0%
Related for RH:CVE-2024-5037