CVE-2024-45496: OpenShift Build Privilege Escalation RCE

Key Information Vulnerability Description CVE Number: CVE-2024-45496 Public Disclosure Date: September 16, 2024 Last Updated: September 16, 2024 Severity: Important Description: A vulnerability has been identified in OpenShift, caused by privilege escalation abuse during the build process in OpenShift Container Platform. During the build initialization phase, the git-clone container runs with privileged security context, allowing unrestricted access to the node. An attacker with developer-level privileges can supply a .gitconfig file containing commands to be executed during the clone process, leading to arbitrary command execution on the worker node. An attacker running in a privileged container can escalate their privileges on the node. Impact Affected OpenShift Versions: All versions Affected Component: ose-openshift-controller-manager Affected Status: Affected Mitigation Recommendation: Cluster administrators should follow the instructions in "Securing Builds by Strategy" to block the use of "Docker" and "Source" build strategies in the cluster, or restrict their use to a set of highly trusted users, until the cluster can be upgraded. Link: Patch Information Affected Package: Red Hat OpenShift Container Platform 4 Patch Status: Affected CVSS Score CVSS v3 Base Score: 9.9 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality Impact: High Integrity Impact: High Availability Impact: Low Acknowledgment Discoverer: Thibault Guittet (Red Hat) Frequently Asked Questions Why is Red Hat’s CVSS v3 score different from other vendors? My product is listed as “under investigation” or “affected”. When will Red Hat release a patch to fix this vulnerability? If my product is listed as “unfixable”, what should I do? If my product is listed as “fix deferred”, what should I do? What are mitigations? I have a Red Hat product, but it’s not listed above. Is it affected? Why is my security scanner reporting that my product is affected by this vulnerability, even though my product version is fixed or not affected? Additional Information Page Generated: September 16, 2024, 08:41:35 UTC Copyright: 2021 Summary This vulnerability results from privilege escalation abuse during the build process in OpenShift Container Platform, affecting all versions of OpenShift. Cluster administrators are advised to follow security strategies to block the use of "Docker" and "Source" build strategies until the cluster can be upgraded.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-45496: OpenShift Build Privilege Escalation RCE

More from this source