CVE-2024-5037
No fix known EPSS <1%CVSS 7.5
A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.
Products: Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Logging Subsystem for Red Hat OpenShift, Red Hat OpenShift distributed tracing 2, Red Hat OpenShift distributed tracing 3
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/openshift/telemeter | no fix |