Security Advisory

CVE-2024-5037

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-06-05 18:03:23
Last updated 2026-04-30 10:00:39
Assigner redhat
State PUBLISHED

Description

A flaw was found in OpenShifts Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.