Intel

CVE-2024-6538

Red Hat Security Advisory: OpenShift Container Platform 4.17.32 bug fix and security update

mediumEPSS 0.6%

Description

A flaw was found in OpenShift Console. A Server Side Request Forgery (SSRF) attack can happen if an attacker supplies all or part of a URL to the server to query. The server is considered to be in a privileged network position and can often reach exposed services that aren't readily available to clients due to network filtering. Leveraging such an attack vector, the attacker can have an impact on other services and potentially disclose information or have other nefarious effects on the system. The /api/dev-console/proxy/internet endpoint on the OpenShift Console allows authenticated users to have the console's pod perform arbitrary and fully controlled HTTP(s) requests. The full response to these requests is returned by the endpoint. While the name of this endpoint suggests the requests are only bound to the internet, no such checks are in place. An authenticated user can therefore ask the console to perform arbitrary HTTP requests from outside the cluster to a service inside the cluster.

Source: REDHAT_CSAFREDHAT_CSAFREDHAT_CSAFCVELISTV5OSVOSVCVEORG

Metrics

Severity
medium
Priority score
109.01
KEV status
—
Exploit maturity
no public PoC known
XIEM Effective CVSS
5.3
Source: nvd-v3
CVSS v3
5.3
CVSS v4
—
EPSS percentile
46.0 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
EPSS score
0.6 %
Low — model estimates < 1% exploitation likelihood.
Published
2025-06-04 09:19 UTC
CWE
CWE-918

Weakness classes (CWE)

  • CWE-918Base

    Server-Side Request Forgery (SSRF)

    The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

    cwe.mitre.org →

Affected operating systems

  • linux

    debian / debian_linux8.0

  • linux

    redhat / enterprise_linux_desktop6.0

  • linux

    redhat / enterprise_linux_desktop7.0

  • linux

    redhat / enterprise_linux_eus7.4

  • linux

    redhat / enterprise_linux_eus7.5

  • linux

    redhat / enterprise_linux_server6.0

  • linux

    redhat / enterprise_linux_server7.0

  • linux

    redhat / enterprise_linux_workstation6.0

  • linux

    redhat / enterprise_linux_workstation7.0

  • linux

    opensuse / leap42.1

  • linux

    opensuse / leap42.2

  • linux

    opensuse / opensuse13.2

  • linux

    canonical / ubuntu_linux16.04

  • linux

    canonical / ubuntu_linux18.04

  • macos

    apple / mac_os_x

  • mobile

    apple / iphone_os

  • other

    apple / tvos

  • other

    apple / watchos

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

  • boost

    boost1.78.0

  • go

    github.com/openshift/console

  • go

    golang.org/x/net

  • go

    golang.org/x/oauth2

  • nodejs

    node.js4.0.0 – 4.1.2

  • nodejs

    node.js4.2.0 – 4.8.2

  • nodejs

    node.js6.0.0 – 6.8.1

  • nodejs

    node.js6.9.0 – 6.10.2

  • nodejs

    node.js7.0.0 – 7.6.0

  • oracle

    database_server

  • oracle

    jdk

  • oracle

    jre

  • oracle

    mysql5.5.0 – 5.5.61

  • oracle

    mysql5.6.0 – 5.6.41

  • oracle

    mysql5.7.0 – 5.7.23

  • oracle

    mysql8.0.0 – 8.0.12

  • redhat

    satellite

  • zlib

    zlib1.2.0.6 – 1.2.9

References & sources

Linked CVEs

IDCVE-2024-6538