Aller au contenu
en Se connecter
7.5 Élevée

CVE-2024-5037 A flaw was found in OpenShift's Telemeter

Description

A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat OpenShift Container Platform 4.12 4.12 premières → < 4.12.0-202408071159.p0.gc9592de.assembly.stream.el8 4.12.0-202408071159.p0.gc9592de.assembly.stream.el8
Red Hat OpenShift Container Platform 4.13 4.13 premières → < 4.13.0-202407081338.p0.g0634a6d.assembly.stream.el8 4.13.0-202407081338.p0.g0634a6d.assembly.stream.el8
Red Hat OpenShift Container Platform 4.14 4.14 premières → < 4.14.0-202407021509.p0.g1f72681.assembly.stream.el8 4.14.0-202407021509.p0.g1f72681.assembly.stream.el8
Red Hat OpenShift Container Platform 4.15 4.15 premières → < 4.15.0-202406200537.p0.g14489f7.assembly.stream.el9 4.15.0-202406200537.p0.g14489f7.assembly.stream.el9
Red Hat OpenShift Container Platform 4.16 4.16 premières → < 4.16.0-202406200537.p0.gc1ecd10.assembly.stream.el9 4.16.0-202406200537.p0.gc1ecd10.assembly.stream.el9
Logging Subsystem for Red Hat OpenShift Versions non publiées
Red Hat OpenShift distributed tracing 2 Versions non publiées
Red Hat OpenShift distributed tracing 3 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat OpenShift Container Platform 4.12

Les 113 CVE de Red Hat OpenShift Container Platform 4.12 →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne CVE-2026-75888 A flaw was found in the OpenShift console 7.7 Élevée CVE-2026-93017 The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core… 7.7 Élevée CVE-2026-83589 A flaw was found in oauth-proxy 6.1 Moyenne
Suivre cette CVE