CVE-2024-6508

CVSS V2 None CVSS V3 None

Description

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2 protocol is vulnerable to a Cross-Site Request Forgery (CSRF) attack if the state parameter is used inefficiently. This flaw allows logging into the victim’s current application account using a third-party account without any restrictions.

Overview

CVE ID
CVE-2024-6508

Assigner
redhat

Vulnerability Status
PUBLISHED

Published Version
2024-08-21T05:45:28.303Z

Last Modified Date
2024-08-21T05:45:28.303Z

Weakness Enumerations

CWE	URL
CWE-331	http://cwe.mitre.org/data/definitions/331.html

References

Reference URL	Reference Tags
https://access.redhat.com/security/cve/CVE-2024-6508	vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2295777	issue-tracking x_refsource_REDHAT

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-6508
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6508

History

Created	Old Value	New Value	Data Type	Notes
2024-08-21 13:07:09				Added to TrackCVE