CVE-2024-21630 Red Hat OpenShift RCE Vulnerability Analysis and POC

Vulnerability Overview Vulnerability Name: CVE-2024-21630 Vulnerability Type: Remote Code Execution (RCE) Vulnerability Description: In Red Hat OpenShift Container Platform 4.14, insufficient input validation for the command allows attackers to trigger remote code execution by crafting malicious input. Impact Scope Affected Product: Red Hat OpenShift Container Platform 4.14 Affected Versions: 4.14 Remediation Fixed Version: Upgrade to Red Hat OpenShift Container Platform 4.14.1 or later. Temporary Mitigation: Avoid using the command to process untrusted input. POC Code References Red Hat Knowledgebase Solutions Red Hat CVE Database Additional Information Publication Date: 2024-03-14 Last Updated: 2024-03-14 CVSS Score: 9.8 (Critical) CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Related Links Red Hat Product Security Center Red Hat Support Red Hat Community Support Language Selection English French Korean Japanese Chinese (China) Product Categories Infrastructure and Management: Red Hat Enterprise Linux, Red Hat Satellite, Red Hat Subscription Management, Red Hat Lightspeed, Red Hat Ansible Automation Platform Cloud Computing: Red Hat OpenShift, Red Hat OpenShift Platform, Red Hat OpenShift AI, Red Hat OpenShift Dedicated, Red Hat Advanced Cluster Security for Kubernetes, Red Hat Advanced Cluster Management for Kubernetes, Red Hat Quay, Red Hat OpenShift Dev Spaces, Red Hat OpenShift Service on AWS Storage: Red Hat Gluster Storage, Red Hat Hyperconverged Infrastructure, Red Hat Ceph Storage, Red Hat OpenShift Data Foundation Runtime: Red Hat Runtimes, Red Hat JBoss Enterprise Application Platform, Red Hat Data Grid, Red Hat JBoss Web Server, Red Hat build of Keycloak, Red Hat support for Spring Boot, Red Hat build of Node.js, Red Hat build of Quarkus Integration and Automation: Red Hat Application Foundations, Red Hat Fuse, Red Hat AMQ, Red Hat 3scale API Management Social Media LinkedIn YouTube Facebook X (formerly Twitter) Summary A severe Remote Code Execution (RCE) vulnerability (CVE-2024-21630) exists in Red Hat OpenShift Container Platform 4.14, allowing attackers to trigger RCE by crafting malicious input. Users are advised to upgrade to version 4.14.1 or later to fix this vulnerability and avoid using the command to process untrusted input.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-21630 Red Hat OpenShift RCE Vulnerability Analysis and POC