6.6
Moyenne
CVE-2024-5042 A flaw was found in the Submariner project
Description
A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RHODF-4.16-RHEL-9 4.16 | premières → < 4.16.0-19 | 4.16.0-19 |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Versions non publiées | |
| Red Hat Openshift Data Foundation 4.2 1774542101 | premières → < 1774542101 | 1774542101 |
| Red Hat Openshift Data Foundation 4.20 1774542101 | premières → < 1774542101 | 1774542101 |
Références
- RHSA-2024:4591 access.redhat.com
- RHSA-2026:6503 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2280921 bugzilla.redhat.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification