{"id":"CVE-2024-5037","state":"PUBLISHED","title":"Openshift/telemeter: iss check during jwt authentication can be bypassed","description":"A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue (\"iss\") check during JSON web token (JWT) authentication.","publishedAt":"2024-06-05T18:03:23.194Z","updatedAt":"2026-04-30T10:00:39.351Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"redhat"},"assigner":"redhat","products":["telemeter","Red Hat Red Hat OpenShift Container Platform 4.12","Red Hat Red Hat OpenShift Container Platform 4.13","Red Hat Red Hat OpenShift Container Platform 4.14","Red Hat Red Hat OpenShift Container Platform 4.15","Red Hat Red Hat OpenShift Container Platform 4.16","Red Hat Logging Subsystem for Red Hat OpenShift","Red Hat Red Hat OpenShift distributed tracing 2","Red Hat Red Hat OpenShift distributed tracing 3"],"affected":[{"packageName":"telemeter","defaultStatus":"unaffected","versions":[{"version":"4.16","status":"affected","lessThan":"4.17","versionType":"semver"}],"collectionURL":"https://github.com/openshift/telemeter"},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","packageName":"openshift4/ose-telemeter","defaultStatus":"affected","versions":[{"version":"v4.12.0-202408071159.p0.gc9592de.assembly.stream.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.12::el8","cpe:/a:redhat:openshift:4.12::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","packageName":"openshift4/ose-telemeter","defaultStatus":"affected","versions":[{"version":"v4.13.0-202407081338.p0.g0634a6d.assembly.stream.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.13::el8","cpe:/a:redhat:openshift:4.13::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","packageName":"openshift4/ose-telemeter","defaultStatus":"affected","versions":[{"version":"v4.14.0-202407021509.p0.g1f72681.assembly.stream.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.14::el8","cpe:/a:redhat:openshift:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","packageName":"openshift4/ose-telemeter-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15.0-202406200537.p0.g14489f7.assembly.stream.el9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.15::el8","cpe:/a:redhat:openshift:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","packageName":"openshift4/ose-telemeter-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16.0-202406200537.p0.gc1ecd10.assembly.stream.el9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el9"]},{"vendor":"Red Hat","product":"Logging Subsystem for Red Hat OpenShift","packageName":"openshift-logging/opa-openshift-rhel8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:logging:5"]},{"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 2","packageName":"rhosdt/tempo-gateway-opa-rhel8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:2"]},{"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3","packageName":"rhosdt/tempo-gateway-opa-rhel8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3"]}],"references":["https://access.redhat.com/errata/RHSA-2024:4151","https://access.redhat.com/errata/RHSA-2024:4156","https://access.redhat.com/errata/RHSA-2024:4329","https://access.redhat.com/errata/RHSA-2024:4484","https://access.redhat.com/errata/RHSA-2024:5200","https://access.redhat.com/security/cve/CVE-2024-5037","https://bugzilla.redhat.com/show_bug.cgi?id=2272339","https://github.com/kubernetes/kubernetes/pull/123540","https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78"],"weaknesses":["CWE-290"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/5xxx/CVE-2024-5037.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-5037","state":"PUBLISHED","datePublished":"2024-06-05T18:03:23.194Z","dateUpdated":"2026-04-30T10:00:39.351Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2024-05-16T22:03:32.375Z"},"containers":{"cna":{"title":"Openshift/telemeter: iss check during jwt authentication can be bypassed","descriptions":[{"lang":"en","value":"A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue (\"iss\") check during JSON web token (JWT) authentication."}],"affected":[{"packageName":"telemeter","defaultStatus":"unaffected","versions":[{"version":"4.16","status":"affected","lessThan":"4.17","versionType":"semver"}],"collectionURL":"https://github.com/openshift/telemeter"},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","packageName":"openshift4/ose-telemeter","defaultStatus":"affected","versions":[{"version":"v4.12.0-202408071159.p0.gc9592de.assembly.stream.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.12::el8","cpe:/a:redhat:openshift:4.12::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","packageName":"openshift4/ose-telemeter","defaultStatus":"affected","versions":[{"version":"v4.13.0-202407081338.p0.g0634a6d.assembly.stream.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.13::el8","cpe:/a:redhat:openshift:4.13::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","packageName":"openshift4/ose-telemeter","defaultStatus":"affected","versions":[{"version":"v4.14.0-202407021509.p0.g1f72681.assembly.stream.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.14::el8","cpe:/a:redhat:openshift:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","packageName":"openshift4/ose-telemeter-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15.0-202406200537.p0.g14489f7.assembly.stream.el9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.15::el8","cpe:/a:redhat:openshift:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","packageName":"openshift4/ose-telemeter-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16.0-202406200537.p0.gc1ecd10.assembly.stream.el9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el9"]},{"vendor":"Red Hat","product":"Logging Subsystem for Red Hat OpenShift","packageName":"openshift-logging/opa-openshift-rhel8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:logging:5"]},{"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 2","packageName":"rhosdt/tempo-gateway-opa-rhel8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:2"]},{"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3","packageName":"rhosdt/tempo-gateway-opa-rhel8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:4151","name":"RHSA-2024:4151","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4156","name":"RHSA-2024:4156","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4329","name":"RHSA-2024:4329","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4484","name":"RHSA-2024:4484","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5200","name":"RHSA-2024:5200","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-5037","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272339","name":"RHBZ#2272339","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://github.com/kubernetes/kubernetes/pull/123540"},{"url":"https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78"}],"metrics":[{"other":{"content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-290","description":"Authentication Bypass by Spoofing","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-04-30T10:00:39.351Z"},"datePublic":"2024-06-05T17:51:00.000Z","x_redhatCweChain":"CWE-290: Authentication Bypass by Spoofing","timeline":[{"lang":"en","time":"2024-03-30T00:00:00.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2024-06-05T17:51:00.000Z","value":"Made public."}],"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-13T20:15:59.404791Z","id":"CVE-2024-5037","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-13T20:16:05.375Z"}},{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:4151","name":"RHSA-2024:4151","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4156","name":"RHSA-2024:4156","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4329","name":"RHSA-2024:4329","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4484","name":"RHSA-2024:4484","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-5037","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272339","name":"RHBZ#2272339","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://github.com/kubernetes/kubernetes/pull/123540","tags":["x_transferred"]},{"url":"https://github.com/openshift/telemeter/blob/a9417a6062c3a31ed78c06ea3a0613a52f2029b2/pkg/authorize/jwt/client_authorizer.go#L78","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T21:03:10.506Z"}}]}}}