Vulnerability · Published Nov 25, 2024 · Assigned by redhat
CVE-2024-6538Openshift-console: openshift console: server-side request forgery
Medium 5.3
In plain English
A medium-severity server-side request forgery in openshift-console. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Official description
A flaw was found in OpenShift Console. A Server Side Request Forgery (SSRF) attack can happen if an attacker supplies all or part of a URL to the server to query. The server is considered to be in a privileged network position and can often reach exposed services that aren't readily available to clients due to network filtering. Leveraging such an attack vector, the attacker can have an impact on other services and potentially disclose information or have other nefarious effects on the system. The /api/dev-console/proxy/internet endpoint on the OpenShift Console allows authenticated users to have the console's pod perform arbitrary and fully controlled HTTP(s) requests. The full response to these requests is returned by the endpoint. While the name of this endpoint suggests the requests are only bound to the internet, no such checks are in place. An authenticated user can therefore ask the console to perform arbitrary HTTP requests from outside the cluster to a service inside the cluster.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/openshift/console | no fix listed | GHSA-v3w7-g6p2-mpx7 |
| Go | github.com/openshift/console | no fix listed | GO-2024-3289 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| openshift-console | 6.0.0 – before 6.0.6 | |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | see references |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- RHSA-2025:14397 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:19058 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:7863 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:8280 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:8556 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-6538 vdb-entry, x_refsource_REDHAT
- RHBZ#2296057 issue-tracking, x_refsource_REDHAT