Openshift-console: openshift console: server-side request forgery

Summary

CVE	CVE-2024-6538
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2024-11-25 07:15:06 UTC
Updated	2026-11-03 18:17:48 UTC
Description	A flaw was found in OpenShift Console. A Server Side Request Forgery (SSRF) attack can happen if an attacker supplies all or part of a URL to the server to query. The server is considered to be in a privileged network position and can often reach exposed services that aren't readily available to clients due to network filtering. Leveraging such an attack vector, the attacker can have an impact on other services and potentially disclose information or have other nefarious effects on the system. The /api/dev-console/proxy/internet endpoint on the OpenShift Console allows authenticated users to have the console's pod perform arbitrary and fully controlled HTTP(s) requests. The full response to these requests is returned by the endpoint. While the name of this endpoint suggests the requests are only bound to the internet, no such checks are in place. An authenticated user can therefore ask the console to perform arbitrary HTTP requests from outside the cluster to a service inside the cluster.

Risk And Classification

Primary CVSS: v3.1 5.3 MEDIUM from [email protected]

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.005840000 probability, percentile 0.479680000 (date 2026-11-03)

Problem Types: CWE-918 | CWE-918 Server-Side Request Forgery

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Secondary	5.3	MEDIUM	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`
3.1	CNA	CVSS	5.3	MEDIUM	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

CVSS v3.1 Breakdown

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Red Hat	Red Hat OpenShift Container Platform 4.16	unaffected v4.16.0-202506020836.p0.g94ae640.assembly.stream.el9 * rpm	Not specified
CNA	Red Hat	Red Hat OpenShift Container Platform 4.17	unaffected v4.17.0-202505280435.p0.gf9c412e.assembly.stream.el9 * rpm	Not specified
CNA	Red Hat	Red Hat OpenShift Container Platform 4.18	unaffected v4.18.0-202505150334.p0.g75bc164.assembly.stream.el9 * rpm	Not specified
CNA	Red Hat	Red Hat OpenShift Container Platform 4.14	unaffected openshift-enterprise-console-container-v4.14.0-202510211320.p2.g0682746.assembly.stream.el8 * rpm	Not specified
CNA	Red Hat	Red Hat OpenShift Container Platform 4.15	unaffected openshift-enterprise-console-container-v4.15.0-202508180724.p2.g69615d5.assembly.stream.el8 * rpm	Not specified

References

Reference	Source	Link	Tags
access.redhat.com/errata/RHSA-2025:19058	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2025:8280	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2025:7863	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2025:8556	[email protected]	access.redhat.com
bugzilla.redhat.com/show_bug.cgi	[email protected]	bugzilla.redhat.com
access.redhat.com/security/cve/CVE-2024-6538	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2025:14397	[email protected]	access.redhat.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Additional Advisory Data

Source	Time	Event
CNA	2024-07-05T21:12:38.000Z	Reported to Red Hat.
CNA	2024-11-21T10:12:45.222Z	Made public.

Workarounds

CNA: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

There are currently no legacy QID mappings associated with this CVE.