Total vulnerabilities in the database
A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.
| Software | From | Fixed in |
|---|---|---|
| redhat / openshift_container_platform | 4.0 | 4.0.x |
| redhat / openshift_distributed_tracing | 2.0 | 2.0.x |