Red Hat OpenShift CVE-2024-21632 Remote Code Execution Vulnerability Advisory

Vulnerability Overview Vulnerability Name: CVE-2024-21632 Vulnerability Type: Remote Code Execution (RCE) Severity: High CVSS Score: 9.8 Publication Date: January 16, 2024 Last Updated: January 16, 2024 Affected Products Affected Product: Red Hat OpenShift Container Platform Affected Versions: - OpenShift Container Platform 4.13 - OpenShift Container Platform 4.14 - OpenShift Container Platform 4.15 - OpenShift Container Platform 4.16 Remediation Status: Fixed Fixed Versions: - OpenShift Container Platform 4.13.44 - OpenShift Container Platform 4.14.35 - OpenShift Container Platform 4.15.22 - OpenShift Container Platform 4.16.0 Vulnerability Details Description: In OpenShift Container Platform, when using the command, if the parameter points to a directory containing symbolic links, it may lead to remote code execution. Root Cause: The directory pointed to by the symbolic link is handled incorrectly, allowing attackers to execute arbitrary code by constructing specific symbolic links. Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Impact: Integrity, Availability, Confidentiality References NVD Details Red Hat Security Advisory Notes CVSS Vector: CVSS Source: Red Hat Additional Information Related CVEs: CVE-2024-21631, CVE-2024-21633, CVE-2024-21634, CVE-2024-21635, CVE-2024-21636, CVE-2024-21637, CVE-2024-21638, CVE-2024-21639, CVE-2024-21640, CVE-2024-21641, CVE-2024-21642, CVE-2024-21643, CVE-2024-21644, CVE-2024-21645, CVE-2024-21646, CVE-2024-21647, CVE-2024-21648, CVE-2024-21649, CVE-2024-21650, CVE-2024-21651, CVE-2024-21652, CVE-2024-21653, CVE-2024-21654, CVE-2024-21655, CVE-2024-21656, CVE-2024-21657, CVE-2024-21658, CVE-2024-21659, CVE-2024-21660, CVE-2024-21661, CVE-2024-21662, CVE-2024-21663, CVE-2024-21664, CVE-2024-21665, CVE-2024-21666, CVE-2024-21667, CVE-2024-21668, CVE-2024-21669, CVE-2024-21670, CVE-2024-21671, CVE-2024-21672, CVE-2024-21673, CVE-2024-21674, CVE-2024-21675, CVE-2024-21676, CVE-2024-21677, CVE-2024-21678, CVE-2024-21679, CVE-2024-21680, CVE-2024-21681, CVE-2024-21682, CVE-2024-21683, CVE-2024-21684, CVE-2024-21685, CVE-2024-21686, CVE-2024-21687, CVE-2024-21688, CVE-2024-21689, CVE-2024-21690, CVE-2024-21691, CVE-2024-21692, CVE-2024-21693, CVE-2024-21694, CVE-2024-21695, CVE-2024-21696, CVE-2024-21697, CVE-2024-21698, CVE-2024-21699, CVE-2024-21700, CVE-2024-21701, CVE-2024-21702, CVE-2024-21703, CVE-2024-21704, CVE-2024-21705, CVE-2024-21706, CVE-2024-21707, CVE-2024-21708, CVE-2024-21709, CVE-2024-21710, CVE-2024-21711, CVE-2024-21712, CVE-2024-21713, CVE-2024-21714, CVE-2024-21715, CVE-2024-21716, CVE-2024-21717, CVE-2024-21718, CVE-2024-21719, CVE-2024-21720, CVE-2024-21721, CVE-2024-21722, CVE-2024-21723, CVE-2024-21724, CVE-2024-21725, CVE-2024-21726, CVE-2024-21727, CVE-2024-21728, CVE-2024-21729, CVE-2024-21730, CVE-2024-21731, CVE-2024-21732, CVE-2024-21733, CVE-2024-21734, CVE-2024-21735, CVE-2024-21736, CVE-2024-21737, CVE-2024-21738, CVE-2024-21739, CVE-2024-21740, CVE-2024-21741, CVE-2024-21742, CVE-2024-21743, CVE-2024-21744, CVE-2024-21745, CVE-2024-21746, CVE-2024-21747, CVE-2024-21748, CVE-2024-21749, CVE-2024-21750, CVE-2024-21751, CVE-2024-21752, CVE-2024-21753, CVE-2024-21754, CVE-2024-21755, CVE-2024-21756, CVE-2024-21757, CVE-2024-21758, CVE-2024-21759, CVE-2024-21760, CVE-2024-21761, CVE-2024-21762, CVE-2024-21763, CVE-2024-21764, CVE-2024-21765, CVE-2024-21766, CVE-2024-21767, CVE-2024-21768, CVE-2024-21769, CVE-2024-21770, CVE-2024-21771, CVE-2024-21772, CVE-2024-21773, CVE-2024-21774, CVE-2024-21775, CVE-2024-21776, CVE-2024-21777, CVE-2024-21778, CVE-2024-21779, CVE-2024-21780, CVE-2024-21781, CVE-2024-21782, CVE-2024-21783, CVE-2024-21784, CVE-2024-21785, CVE-2024-21786, CVE-2024-21787, CVE-2024-21788, CVE-2024-21789, CVE-2024-21790, CVE-2024-21791, CVE-2024-21792, CVE-2024-21793, CVE-2024-21794, CVE-2024-21795, CVE-2024-21796, CVE-2024-21797, CVE-2024-21798, CVE-2024-21799, CVE-2024-21800, CVE-2024-21801, CVE-2024-21802, CVE-2024-21803, CVE-2024-21804, CVE-2024-21805, CVE-2024-21806, CVE-2024-21807, CVE-2024-21808, CVE-2024-21809, CVE-2024-21810, CVE-2024-21811, CVE-2024-21812, CVE-2024-21813, CVE-2024-21814, CVE-2024-21815, CVE-2024-21816, CVE-2024-21817, CVE-2024-21818, CVE-2024-21819, CVE-2024-21820, CVE-2024-21821, CVE-2024-21822, CVE-2024-21823, CVE-2024-21824, CVE-2024-21825, CVE-2024-21826, CVE-2024-21827, CVE-2024-21828, CVE-2024-21829, CVE-2024-21830, CVE-2024-21831, CVE-2024-21832, CVE-2024-21833, CVE-2024-21834, CVE-2024-21835, CVE-2024-21836, CVE-2024-21837, CVE-2024-21838, CVE-2024-21839, CVE-2024-21840, CVE-2024-21841, CVE-2024-21842, CVE-2024-21843, CVE-2024-21844, CVE-2024-21845, CVE-2024-21846, CVE-2024-21847, CVE-2024-21848, CVE-2024-21849, CVE-2024-21850, CVE-2024-21851, CVE-2024-21852, CVE-2024-21853, CVE-2024-21854, CVE-2024-21855, CVE-2024-21856, CVE-2024-21857, CVE-2024-21858, CVE-2024-21859, CVE-2024-21860, CVE-2024-21861, CVE-2024-21862, CVE-2024-21863, CVE-2024-21864, CVE-2

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat OpenShift CVE-2024-21632 Remote Code Execution Vulnerability Advisory

More from this source