PT-2024-4052 · Red Hat · Openshift Telemeter

Robb Gatica · Published 2024-06-05 · Updated 2024-08-19 · CVE-2024-5037

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenShift Telemeter (affected versions not specified)

Description The issue is related to a flaw in OpenShift's Telemeter that allows an attacker to bypass authentication using a forged token. This can be done by exploiting the "iss" check during JSON web token (JWT) authentication. If certain conditions are met, a remote attacker can use this flaw to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

BDU:2024-04494

CVE-2024-5037

GO-2024-2905

Affected Products

Openshift Telemeter

References · 26

• https://github.com/kubernetes/kubernetes/pull/123540 · Patch
• https://access.redhat.com/errata/RHSA-2024:4156 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:4484 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-5037 · Security Note
• https://access.redhat.com/errata/RHSA-2024:5200 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2024-5037 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04494 · Security Note
• https://access.redhat.com/errata/RHSA-2024:4329 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-5037 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2272339 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:4151 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-2905 · Vendor Advisory
• https://github.com/kubernetes/kubernetes/commit/236f1b0f6b4cbb7e372a72d181c6285bdaf74873 · Note
• https://github.com/golang/vulndb/issues/2905 · Note
• https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78 · Note