Skip to content
Fencer Vulns
high 8.0

CVE-2024-6508 json

Openshift-console: oauth2 insufficient state parameter entropy

published 2024-08-21 2 y ago modified 2026-08-11 2 mo ago also GHSA-4crf-28c7-v4gr , GO-2024-3083 , EUVD-2024-2489

cvss
8.0
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.7%
EPSS 0.7% chance of exploitation in 30 days, percentile 52%
public exploits
0
none known

Summary

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2 protocol is vulnerable to a Cross-Site Request Forgery (CSRF) attack if the state parameter is used inefficiently. This flaw allows logging into the victim’s current application account using a third-party account without any restrictions.

Patch / fix

  • Red Hat Red Hat OpenShift Container Platform 4.12 v4.12.0-202412201659.p0.g8910d84.assembly.stream.el8
  • Red Hat Red Hat OpenShift Container Platform 4.13 v4.13.0-202411300029.p0.g68accd9.assembly.stream.el8
  • Red Hat Red Hat OpenShift Container Platform 4.14 v4.14.0-202411131205.p0.g839a801.assembly.stream.el8
  • Red Hat Red Hat OpenShift Container Platform 4.15 v4.15.0-202411060036.p0.gd8360d4.assembly.stream.el8
  • Red Hat Red Hat OpenShift Container Platform 4.16 v4.16.0-202410231737.p0.gf0870c3.assembly.stream.el9
  • Red Hat Red Hat OpenShift Container Platform 4.17 v4.17.0-202410091535.p0.ge61f187.assembly.stream.el9
  • Red Hat Red Hat OpenShift Container Platform 4.18 v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9, v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9, v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9, v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9, v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9, v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9, v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9, v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9, v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9, v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9, v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9, v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9, v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9, v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9, v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9, v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9, v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9, v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9, v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9, v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-6508 updated cvss 8.0

openshift-console: OAuth2 insufficient state parameter entropy

  • Red Hat OpenShift Container Platform 4.12 openshift4/ose-console v4.12.0-202412201659.p0.g8910d84.assembly.stream.el8
    fixed: vendor fix RHSA-2025:0014
  • Red Hat OpenShift Container Platform 4.13 openshift4/ose-console v4.13.0-202411300029.p0.g68accd9.assembly.stream.el8
    fixed: vendor fix RHSA-2024:10813
  • Red Hat OpenShift Container Platform 4.14 openshift4/ose-console v4.14.0-202411131205.p0.g839a801.assembly.stream.el8
    fixed: vendor fix RHSA-2024:9620
  • Red Hat OpenShift Container Platform 4.15 openshift4/ose-console v4.15.0-202411060036.p0.gd8360d4.assembly.stream.el8
    fixed: vendor fix RHSA-2024:8991
  • Red Hat OpenShift Container Platform 4.16 openshift4/ose-console-rhel9 v4.16.0-202410231737.p0.gf0870c3.assembly.stream.el9
    fixed: vendor fix RHSA-2024:8415
  • Red Hat OpenShift Container Platform 4.17 openshift4/ose-console-rhel9 v4.17.0-202410091535.p0.ge61f187.assembly.stream.el9
    fixed: vendor fix RHSA-2024:7922
  • Red Hat OpenShift Container Platform 4.18 rhcos 418.94.202502100215-0, openshift4/frr-rhel9 v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9, openshift4/ose-cli-rhel9 v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9, openshift4/ose-pod-rhel9 v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9, openshift4/ose-etcd-rhel9 v4.18.0-202501230001.p0.g914783c.assembly.stream.el9, openshift4/ose-tests-rhel9 v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9, +184 more
    fixed: vendor fix RHSA-2024:6122
  • Red Hat OpenShift Container Platform 4.12 rhcos 412.86.202412201644-0, openshift4/ose-cli v4.12.0-202412170201.p0.gd691257.assembly.stream.el8, openshift4/ose-pod v4.12.0-202412170201.p0.g1eb8682.assembly.stream.el8, openshift4/ose-etcd v4.12.0-202412170201.p0.gbb82e89.assembly.stream.el8, openshift4/ose-tests v4.12.0-202412201659.p0.gdaedb2e.assembly.stream.el8, openshift4/ose-coredns v4.12.0-202412170201.p0.gcc1194e.assembly.stream.el8, +184 more Red Hat OpenShift Container Platform 4.13 rhcos 413.92.202411212100-0, openshift4/ose-cli v4.13.0-202411300029.p0.gd192e90.assembly.stream.el8, openshift4/ose-pod v4.13.0-202411300029.p0.g53fd427.assembly.stream.el8, openshift4/ose-tests v4.13.0-202411300029.p0.g19f8094.assembly.stream.el8, openshift4/ose-coredns v4.13.0-202411300029.p0.ge70f097.assembly.stream.el8, openshift4/ose-deployer v4.13.0-202411300029.p0.gd192e90.assembly.stream.el8, +186 more Red Hat OpenShift Container Platform 4.14 rhcos 414.92.202411130444-0, openshift4/ose-cli v4.14.0-202411130434.p0.g44b3ac2.assembly.stream.el8, openshift4/ose-pod v4.14.0-202411130434.p0.g03a907c.assembly.stream.el8, openshift4/ose-tests v4.14.0-202411130434.p0.g2c640ec.assembly.stream.el8, openshift4/ose-coredns v4.14.0-202411130434.p0.gfdd6037.assembly.stream.el8, openshift4/ose-deployer v4.14.0-202411130434.p0.g44b3ac2.assembly.stream.el8, +188 more Red Hat OpenShift Container Platform 4.15 rhcos 415.92.202411050056-0, openshift4/ose-cli v4.15.0-202411060036.p0.g8231637.assembly.stream.el8, openshift4/ose-tests v4.15.0-202411060036.p0.g7db90dc.assembly.stream.el8, openshift4/ose-deployer v4.15.0-202411060036.p0.g8231637.assembly.stream.el8, openshift4/ose-installer v4.15.0-202411060036.p0.g4caaa38.assembly.stream.el8, openshift4/ose-pod-rhel9 v4.15.0-202410241805.p0.g502c5ce.assembly.stream.el9, +187 more Red Hat OpenShift Container Platform 4.16 rhcos 416.94.202410211619-0, openshift4/ose-sdn-rhel9 v4.16.0-202410231536.p0.ge4a5322.assembly.stream.el9, openshift4/ose-ironic-rhel9 v4.16.0-202410221305.p0.g38becaa.assembly.stream.el9, openshift4/driver-toolkit-rhel9 v4.16.0-202410211636.p0.g1d5732f.assembly.stream.el9, openshift4/ose-hypershift-rhel9 v4.16.0-202410221936.p0.gf65db45.assembly.stream.el9, openshift4/ose-kube-proxy-rhel9 v4.16.0-202410231536.p0.ge4a5322.assembly.stream.el9, +12 more Red Hat OpenShift Container Platform 4.17 rhcos 417.94.202410090854-0, openshift4/frr-rhel9 v4.17.0-202410071037.p0.g377d02f.assembly.stream.el9, openshift4/ose-cli-rhel9 v4.17.0-202410031034.p0.g9566b8e.assembly.stream.el9, openshift4/ose-pod-rhel9 v4.17.0-202410011205.p0.g9f67343.assembly.stream.el9, openshift4/ose-etcd-rhel9 v4.17.0-202410041306.p0.gc82057d.assembly.stream.el9, openshift4/ose-tests-rhel9 v4.17.0-202410090834.p0.g6513fc3.assembly.stream.el9, +182 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.67% chance of exploitation in the next 30 days, higher than 52% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.0 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
GitHub 3.1 8.0 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
go github.com/openshift/console
<=6.0.6
all versions
 no fix listed

Affected products

  • Red Hat Red Hat OpenShift Container Platform 4.12
  • Red Hat Red Hat OpenShift Container Platform 4.13
  • Red Hat Red Hat OpenShift Container Platform 4.14
  • Red Hat Red Hat OpenShift Container Platform 4.15
  • Red Hat Red Hat OpenShift Container Platform 4.16
  • Red Hat Red Hat OpenShift Container Platform 4.17
  • Red Hat Red Hat OpenShift Container Platform 4.18

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.