GHSA-qqv8-ph7f-h3f7
OpenShift Builder has a path traversal, allows command injection in privileged BuildContainer
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2024-7387
- Alias
- GO-2024-3129
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
Description
A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the "Docker" strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container.
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/openshift/builder | introduced 0, last affected 4.0.0 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2024-7387 ADVISORY
- https://github.com/openshift/builder/commit/0b62633adfa2836465202bc851885e078ec888d1 WEB
- https://access.redhat.com/errata/RHSA-2024:3718 WEB
- https://access.redhat.com/errata/RHSA-2024:6122 WEB
- https://access.redhat.com/errata/RHSA-2024:6685 WEB
- https://access.redhat.com/errata/RHSA-2024:6687 WEB
- https://access.redhat.com/errata/RHSA-2024:6689 WEB
- https://access.redhat.com/errata/RHSA-2024:6691 WEB
- https://access.redhat.com/errata/RHSA-2024:6705 WEB
- https://access.redhat.com/security/cve/CVE-2024-7387 WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2302259 WEB
- https://github.com/openshift/builder PACKAGE
- https://pkg.go.dev/vuln/GO-2024-3129 WEB
- https://stuxxn.github.io/advisory/2024/10/02/openshift-build-docker-priv-esc.html WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |