Red Hat OpenShift: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• Medium 4.4
  CVE-2022-3248

  Openshift api admission checks does not enforce "custom-host" permissions

  A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied.

  Red Hat Red Hat OpenShift Container Platform 4 Red Hat Advanced Cluster Management for Kubernetes 2 Red Hat OpenShift Container Platform 3.11
  Oct 5, 2023

Revision history

1. 2023-10-05 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2023-10-05
  https://bugzilla.redhat.com/show_bug.cgi?id=2072188
• Red Hat Security Advisory vom 2023-10-05
  https://access.redhat.com/security/cve/CVE-2022-3248
• Red Hat Security Advisory vom 2023-10-05
  https://github.com/advisories/GHSA-4rc4-8xqr-5g82