Description
A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | openshift-controller-manager | 4.12.0 – ≤ 4.18.0 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/openshift/openshift-controller-manager | < 0.0.0-alpha.0.0.20240911 | 0.0.0-alpha.0.0.20240911 | GHSA-j8gh-87rx-c7w9 |
| Go | github.com/openshift/openshift-controller-manager | all versions | — | GO-2024-3128 |
Advisories 1
- WID-SEC-2024-2174 Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 19, 2024
References
- RHSA-2024:3718 vendor-advisory
- RHSA-2024:6122 vendor-advisory
- RHSA-2024:6685 vendor-advisory
- RHSA-2024:6687 vendor-advisory
- RHSA-2024:6689 vendor-advisory
- RHSA-2024:6691 vendor-advisory
- RHSA-2024:6705 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-45496 vdb-entry
- RHBZ#2308661 issue-tracking