Skip to content
fr Sign in
6.6 Medium

CVE-2024-5042 A flaw was found in the Submariner project

Description

A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.

Affected products and versions

Product Affected versions Fixed in
RHODF-4.16-RHEL-9 4.16 earliest → < 4.16.0-19 4.16.0-19
Red Hat Advanced Cluster Management for Kubernetes 2 Versions not published
Red Hat Openshift Data Foundation 4.2 1774542101 earliest → < 1774542101 1774542101
Red Hat Openshift Data Foundation 4.20 1774542101 earliest → < 1774542101 1774542101

References

Timeline

  1. Published
  2. Last modified

Other CVEs of RHODF-4.16-RHEL-9

The 3 CVEs of RHODF-4.16-RHEL-9 →
CVE-2024-11831 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 5.4 Medium CVE-2024-1394 Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 7.5 High
Track this CVE