Aller au contenu
6.6 Moyenne

CVE-2024-5042 A flaw was found in the Submariner project

Description

A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.

Produits et versions touchés

Produit Versions touchées Corrigé en
RHODF-4.16-RHEL-9 4.16 premières → < 4.16.0-19 4.16.0-19
Red Hat Advanced Cluster Management for Kubernetes 2 Versions non publiées
Red Hat Openshift Data Foundation 4.2 1774542101 premières → < 1774542101 1774542101
Red Hat Openshift Data Foundation 4.20 1774542101 premières → < 1774542101 1774542101

Références

Chronologie

  1. Publiée
  2. Dernière modification
Les 3 CVE de RHODF-4.16-RHEL-9 →
Suivre cette CVE