Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Openshift-controller-manager: elevated build pods can lead to node compromise in openshift (openshift-controller-manager)

CVE-2024-45496
CRITICAL 9.9

At a glance

Source
NVD
EPSS
EPSS 1.02 % · percentile 63 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Deferred

Search on…

Description

A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.

Weaknesses (CWE)

  • CWE-269 — Improper Privilege Management

References

Scores

VersionScoreVectorScored by
CVSS 3.1CRITICAL 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Lredhat
CVSS 3.1CRITICAL 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:LNVD · secalert@redhat.com (Secondary)

Advisories

European references

Affected products

ProductVersions
openshift-controller-manageraffected 4.12.0 ≤ 4.18.0
Red Hat · Red Hat OpenShift Container Platform 4.12unaffected v4.12.0-202409131137.p1.g0b1971a.assembly.stream.el8 < *
Red Hat · Red Hat OpenShift Container Platform 4.13unaffected v4.13.0-202409130707.p1.gb75d499.assembly.stream.el8 < *
Red Hat · Red Hat OpenShift Container Platform 4.14unaffected v4.14.0-202409130708.p1.g9020ea1.assembly.stream.el8 < *
Red Hat · Red Hat OpenShift Container Platform 4.15unaffected v4.15.0-202409131835.p1.gbe9d673.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.16unaffected v4.16.0-202409130937.p1.g5dcfc99.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.17unaffected v4.17.0-202409182235.p0.g7682a61.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 < *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD