CVE-2024-5037

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-5037
A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://access.redhat.com/errata/RHSA-2024:4151
https://access.redhat.com/errata/RHSA-2024:4156
https://access.redhat.com/errata/RHSA-2024:4329
https://access.redhat.com/errata/RHSA-2024:4484
https://access.redhat.com/errata/RHSA-2024:5200
https://access.redhat.com/security/cve/CVE-2024-5037 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2272339 Issue Tracking Vendor Advisory
https://github.com/kubernetes/kubernetes/pull/123540 Patch Third Party Advisory
https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78 Product
https://access.redhat.com/errata/RHSA-2024:4151
https://access.redhat.com/errata/RHSA-2024:4156
https://access.redhat.com/errata/RHSA-2024:4329
https://access.redhat.com/errata/RHSA-2024:4484
https://access.redhat.com/security/cve/CVE-2024-5037 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2272339 Issue Tracking Vendor Advisory
https://github.com/kubernetes/kubernetes/pull/123540 Patch Third Party Advisory
https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78 Product
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_distributed_tracing:2.0:*:*:*:*:*:*:*
History

21 Nov 2024, 09:46

Type Values Removed Values Added
References () https://access.redhat.com/errata/RHSA-2024:4151 - () https://access.redhat.com/errata/RHSA-2024:4151 -
References () https://access.redhat.com/errata/RHSA-2024:4156 - () https://access.redhat.com/errata/RHSA-2024:4156 -
References () https://access.redhat.com/errata/RHSA-2024:4329 - () https://access.redhat.com/errata/RHSA-2024:4329 -
References () https://access.redhat.com/errata/RHSA-2024:4484 - () https://access.redhat.com/errata/RHSA-2024:4484 -
References () https://access.redhat.com/security/cve/CVE-2024-5037 - Vendor Advisory () https://access.redhat.com/security/cve/CVE-2024-5037 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2272339 - Issue Tracking, Vendor Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=2272339 - Issue Tracking, Vendor Advisory
References () https://github.com/kubernetes/kubernetes/pull/123540 - Patch, Third Party Advisory () https://github.com/kubernetes/kubernetes/pull/123540 - Patch, Third Party Advisory
References () https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78 - Product () https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78 - Product

19 Aug 2024, 17:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:5200 -

17 Jul 2024, 05:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:4484 -

14 Jul 2024, 17:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:4329 -

03 Jul 2024, 17:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:4156 -

03 Jul 2024, 00:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:4151 -

18 Jun 2024, 17:04

Type Values Removed Values Added
References () https://access.redhat.com/security/cve/CVE-2024-5037 - () https://access.redhat.com/security/cve/CVE-2024-5037 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2272339 - () https://bugzilla.redhat.com/show_bug.cgi?id=2272339 - Issue Tracking, Vendor Advisory
References () https://github.com/kubernetes/kubernetes/pull/123540 - () https://github.com/kubernetes/kubernetes/pull/123540 - Patch, Third Party Advisory
References () https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78 - () https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78 - Product
CPE cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_distributed_tracing:2.0:*:*:*:*:*:*:*
First Time Redhat openshift Distributed Tracing
Redhat openshift Container Platform
Redhat

06 Jun 2024, 14:17

Type Values Removed Values Added
Summary
  • (es) Se encontró una falla en Telemeter de OpenShift. Si se cumplen ciertas condiciones, un atacante puede usar un token falsificado para evitar la verificación del problema ("iss") durante la autenticación del token web JSON (JWT).

05 Jun 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-05 18:15

Updated : 2024-11-21 09:46

NVD link : CVE-2024-5037

Mitre link : CVE-2024-5037

CVE.ORG link : CVE-2024-5037

JSON object : View

Products Affected

redhat

  • openshift_container_platform
  • openshift_distributed_tracing
CWE
CWE-290

Authentication Bypass by Spoofing