Vulnerabilities > CVE-2024-5037 - Unspecified vulnerability in Redhat products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
redhat
NVD
Published: 2024-06-05
Updated: 2024-11-21

Summary

A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.

Vulnerable Configurations

Part Description Count
Application
Redhat
2

References