CVE-2024-21632: Red Hat OpenShift 4.14 Remote Code Execution Vulnerability

Vulnerability Overview Vulnerability Name: CVE-2024-21632 Vulnerability Type: Remote Code Execution (RCE) Vulnerability Description: In Red Hat OpenShift Container Platform 4.14, there is a remote code execution vulnerability. Attackers can execute arbitrary code on affected systems via crafted requests. Scope of Impact Affected Product: Red Hat OpenShift Container Platform 4.14 Affected Version: 4.14 Remediation Fixed Version: Upgrade to Red Hat OpenShift Container Platform 4.14.14 or later Temporary Mitigation: Restrict access to the OpenShift cluster, allowing only trusted users and systems to access it. Proof of Concept (POC) Code References Red Hat Knowledgebase Solutions Red Hat Knowledgebase Articles Red Hat CVE Database Additional Information Release Date: 2024-03-12 Last Updated: 2024-03-12 CVSS Score: 9.8 (Critical) CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Related Links Red Hat Product Security Center Red Hat Support Red Hat Community Support Language Selection English Français 한국어 日本語 Chinese (China) Product Links Red Hat Enterprise Linux Red Hat OpenShift Red Hat Ansible Automation Platform Downloads and Containers Downloads Packages Containers Resources Documentation Product Life Cycles Product Compliance Errata Training and Certification About Course Index Certification Index Skill Assessment Security Security Updates Security Advisories Red Hat CVE Database Errata References Security Bulletins Security Ratings Security Data Resources Security Labs Backporting Policies Security Blog Support Support Cases Troubleshoot Get Support Contact Red Hat Support Community Support Customer Portal Community Community Discussions Red Hat Accelerator Program Resources Product Life Cycles Customer Portal Labs Red Hat JBoss Supported Configurations Red Hat Lightspeed Troubleshooting Or troubleshoot an issue Language Selection English Français 한국어 日本語 Chinese (China) Infrastructure and Management Red Hat Enterprise Linux Red Hat Satellite Red Hat Subscription Management Red Hat Lightspeed Red Hat Ansible Automation Platform Cloud Computing Red Hat OpenShift Red Hat OpenStack Platform Red Hat OpenShift AI Red Hat OpenShift Dedicated Red Hat Advanced Cluster Security for Kubernetes Red Hat Advanced Cluster Management for Kubernetes Red Hat Quay Red Hat OpenShift Dev Spaces Red Hat OpenShift Service on AWS Storage Red Hat Gluster Storage Red Hat Hyperconverged Infrastructure Red Hat Ceph Storage Red Hat OpenShift Data Foundation Runtime Red Hat Runtimes Red Hat JBoss Enterprise Application Platform Red Hat Data Grid Red Hat JBoss Web Server Red Hat build of Keycloak Red Hat support for Spring Boot Red Hat build of Node.js Red Hat build of OpenJDK Integration and Automation Red Hat Application Foundations Red Hat Fuse Red Hat AMQ Red Hat 3scale API Management All Products All Products Social Media LinkedIn YouTube Facebook X (formerly Twitter)

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-21632: Red Hat OpenShift 4.14 Remote Code Execution Vulnerability

More from this source