9.9
Critical
CVE-2024-45496 A flaw was found in OpenShift
Description
A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenShift Container Platform 4.12 4.12 | earliest → < 4.12.0-202409131137.p1.g0b1971a.assembly.stream.el8 | 4.12.0-202409131137.p1.g0b1971a.assembly.stream.el8 |
| Red Hat OpenShift Container Platform 4.13 4.13 | earliest → < 4.13.0-202409130707.p1.gb75d499.assembly.stream.el8 | 4.13.0-202409130707.p1.gb75d499.assembly.stream.el8 |
| Red Hat OpenShift Container Platform 4.14 4.14 | earliest → < 4.14.0-202409130708.p1.g9020ea1.assembly.stream.el8 | 4.14.0-202409130708.p1.g9020ea1.assembly.stream.el8 |
| Red Hat OpenShift Container Platform 4.15 4.15 | earliest → < 4.15.0-202409131835.p1.gbe9d673.assembly.stream.el9 | 4.15.0-202409131835.p1.gbe9d673.assembly.stream.el9 |
| Red Hat OpenShift Container Platform 4.16 4.16 | earliest → < 4.16.0-202409130937.p1.g5dcfc99.assembly.stream.el9 | 4.16.0-202409130937.p1.g5dcfc99.assembly.stream.el9 |
| Red Hat OpenShift Container Platform 4.17 4.17 | earliest → < 4.17.0-202409182235.p0.g7682a61.assembly.stream.el9 | 4.17.0-202409182235.p0.g7682a61.assembly.stream.el9 |
| Red Hat OpenShift Container Platform 4.18 418.94 | earliest → < 418.94.202502100215-0 | 418.94.202502100215-0 |
References
- RHSA-2024:3718 access.redhat.com
- RHSA-2024:6122 access.redhat.com
- RHSA-2024:6685 access.redhat.com
- RHSA-2024:6687 access.redhat.com
- RHSA-2024:6689 access.redhat.com
- RHSA-2024:6691 access.redhat.com
- RHSA-2024:6705 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2308661 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat OpenShift Container Platform 4.12
The 113 CVEs of Red Hat OpenShift Container Platform 4.12 →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Medium
CVE-2026-75888
A flaw was found in the OpenShift console
7.7
High
CVE-2026-93017
The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core…
7.7
High
CVE-2026-83589
A flaw was found in oauth-proxy
6.1
Medium