5.3
Moyenne
CVE-2024-6535 A flaw was found in Skupper
Description
A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Service Interconnect 1.4 for RHEL 9 1.4 | premières → < 1.4.7-1 | 1.4.7-1 |
| Service Interconnect 1 for RHEL 9 1.5 | premières → < 1.5.5-1 | 1.5.5-1 |
| Red Hat Service Interconnect 1 | Versions non publiées |