github.com/openshift/telemeter

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2024-5037

Openshift/telemeter: iss check during jwt authentication can be bypassed

A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.

Red Hat Red Hat OpenShift Container Platform 4.16 Red Hat OpenShift Container Platform 4.14 Red Hat OpenShift Container Platform 4.15 Go

Jun 5, 2024