← Database

CVE-2024-5037

HIGH CVSS: 7.5 Published: 2024-06-05 Modified: 2026-06-17

Description

A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.

Affected Platforms

Redhat Openshift Distributed TracingRedhat Openshift Container Platform

Weakness Type

CWE-290

References