CVE-2024-45496
Openshift-controller-manager: elevated build pods can lead to node compromise in openshift
CRITICAL 9.9
En bref
- Source
- NVD
- EPSS
- EPSS 1.02 % · centile 63 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- redhat
- Statut NVD
- Deferred
Description
A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.
Faiblesses (CWE)
- CWE-269 — Gestion incorrecte des privilèges
Références
- https://access.redhat.com/errata/RHSA-2024:3718
- https://access.redhat.com/errata/RHSA-2024:6122
- https://access.redhat.com/errata/RHSA-2024:6685
- https://access.redhat.com/errata/RHSA-2024:6687
- https://access.redhat.com/errata/RHSA-2024:6689
- https://access.redhat.com/errata/RHSA-2024:6691
- https://access.redhat.com/errata/RHSA-2024:6705
- https://access.redhat.com/security/cve/CVE-2024-45496
- https://bugzilla.redhat.com/show_bug.cgi?id=2308661
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.9 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L | redhat |
| CVSS 3.1 | CRITICAL 9.9 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L | NVD · secalert@redhat.com (Secondary) |
Avis
- GHSA-j8gh-87rx-c7w9 — OpenShift Controller Manager Improper Privilege Management
- GO-2024-3128 — OpenShift Controller Manager Improper Privilege Management in github.com/openshift/openshift-controller-manager
Références européennes
- ENISA EUVD · EUVD-2024-2818
- GCVE · GCVE-0-2024-45496
Produits affectés
| Produit | Versions |
|---|---|
| openshift-controller-manager | affected 4.12.0 ≤ 4.18.0 |
| Red Hat · Red Hat OpenShift Container Platform 4.12 | unaffected v4.12.0-202409131137.p1.g0b1971a.assembly.stream.el8 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.13 | unaffected v4.13.0-202409130707.p1.gb75d499.assembly.stream.el8 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202409130708.p1.g9020ea1.assembly.stream.el8 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.15 | unaffected v4.15.0-202409131835.p1.gbe9d673.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.16 | unaffected v4.16.0-202409130937.p1.g5dcfc99.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.17 | unaffected v4.17.0-202409182235.p0.g7682a61.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 < * |
| Red Hat · Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 < * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |