openshift github.com/openshift/telemeter vulnerabilities

Latest openshift github.com/openshift/telemeter CVEs

Newest publication first

1. CVE-2024-5037 Openshift/telemeter: iss check during jwt authentication can be bypassed

   Published 2024-06-05

   High·CVSS 7.5 EPSS 0.81%

   A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.