CVE-2024-21630: Red Hat OpenShift RCE Vulnerability Advisory and Fix

Vulnerability Overview Vulnerability Name: CVE-2024-21630 Vulnerability Type: Remote Code Execution (RCE) Vulnerability Description: In Red Hat OpenShift Container Platform 4.14, due to insufficient input validation for the command, attackers can trigger remote code execution by constructing malicious input. Scope of Impact Affected Product: Red Hat OpenShift Container Platform 4.14 Affected Component: command Affected Version: 4.14 Remediation Fixed Version: Upgrade to Red Hat OpenShift Container Platform 4.14.1 or later Temporary Mitigation: Avoid using the command to process untrusted input POC Code References Red Hat Knowledgebase Solutions Red Hat Knowledgebase Articles Red Hat CVE Database Additional Information Publication Date: 2024-01-15 Last Updated: 2024-01-15 CVSS Score: 9.8 (Critical) CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Related Resources Red Hat Product Security Center Red Hat Support Red Hat Community Support Language Selection Current Language: Chinese (China) Other Languages: English, Français, 한국어, 日本語 Product Links Red Hat Enterprise Linux Red Hat OpenShift Red Hat Ansible Automation Platform Downloads and Containers Downloads Packages Containers Documentation and Resources Documentation Product Life Cycles Product Compliance Errata Training and Certification About Course Index Certification Index Skill Assessment Security Center Security Updates Security Advisories Red Hat CVE Database Errata References Security Bulletins Security Ratings Security Data Support Support Cases Troubleshoot Get Support Contact Red Hat Support Community Support Customer Portal Community Community Discussions Red Hat Accelerator Program Additional Resources Product Life Cycles Customer Portal Labs Red Hat JBoss Supported Configurations Red Hat Lightspeed Troubleshooting Or troubleshoot an issue Social Media LinkedIn YouTube Facebook X (formerly Twitter) Product Links Red Hat Enterprise Linux Red Hat Satellite Red Hat Subscription Management Red Hat Lightspeed Red Hat Ansible Automation Platform Cloud Computing Red Hat OpenShift Red Hat OpenShift Platform Red Hat OpenShift AI Red Hat OpenShift Dedicated Red Hat Advanced Cluster Security for Kubernetes Red Hat Advanced Cluster Management for Kubernetes Red Hat Quay Red Hat OpenShift Dev Spaces Red Hat OpenShift Service on AWS Storage Red Hat Gluster Storage Red Hat Hyperconverged Infrastructure Red Hat Ceph Storage Red Hat OpenShift Data Foundation Runtime Red Hat Runtimes Red Hat JBoss Enterprise Application Platform Red Hat Data Grid Red Hat JBoss Web Server Red Hat build of Keycloak Red Hat support for Spring Boot Red Hat build of Node.js Red Hat build of OpenJDK Integration and Automation Red Hat Application Foundations Red Hat Fuse Red Hat AMQ Red Hat 3scale API Management All Products All Products LinkedIn LinkedIn

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-21630: Red Hat OpenShift RCE Vulnerability Advisory and Fix

More from this source