CVE-2024-5037

Openshift/telemeter: iss check during jwt authentication can be bypassed

State: Published
Severity: 7.5 High
Published: Jun 5, 2024
Updated: Apr 30, 2026
Reserved: May 16, 2024

Description

A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	redhat

Weaknesses

CWE-290 Authentication Bypass by Spoofing

Affected Products

Product	Versions
telemeter	4.16 to before 4.17Affected
Red Hat OpenShift Container Platform 4.12Red Hat	v4.12.0-202408071159.p0.gc9592de.assembly.stream.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.13Red Hat	v4.13.0-202407081338.p0.g0634a6d.assembly.stream.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.14Red Hat	v4.14.0-202407021509.p0.g1f72681.assembly.stream.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.15Red Hat	v4.15.0-202406200537.p0.g14489f7.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.16Red Hat	v4.16.0-202406200537.p0.gc1ecd10.assembly.stream.el9 and laterNot affected
Logging Subsystem for Red Hat OpenShiftRed Hat
Red Hat OpenShift distributed tracing 2Red Hat
Red Hat OpenShift distributed tracing 3Red Hat

References

RHSA-2024:4151vendor-advisory
RHSA-2024:4156vendor-advisory
RHSA-2024:4329vendor-advisory
RHSA-2024:4484vendor-advisory
RHSA-2024:5200vendor-advisory
https://access.redhat.com/security/cve/CVE-2024-5037vdb-entry
RHBZ#2272339issue-tracking
https://github.com/kubernetes/kubernetes/pull/123540
https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.