Aller au contenu
en Se connecter
7.7 Élevée

CVE-2026-93017 The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core…

Description

The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref: https://github.com/openshift/insights-operator/blob/8f15e3157ff09f54ab22801f5b21da35a195cc6d/manifests/03-clusterrole.yaml#L368-L373 ``` - apiGroups: - "" resources: - secrets verbs: - get - list ``` By spawning a pod with the gather service account mounted, an attacker will be able to access any secret in any namespace. ``` spec: serviceAccountName:"gather" ```

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat OpenShift Container Platform 4 Versions non publiées
Red Hat OpenShift Container Platform 4.20 1791625576 premières → < 1791625576 1791625576
Red Hat OpenShift Container Platform 4.21 1791980436 premières → < 1791980436 1791980436
Red Hat OpenShift Container Platform 4.19 1791626249 premières → < 1791626249 1791626249
Red Hat OpenShift Container Platform 4.14 1791842870 premières → < 1791842870 1791842870
Red Hat OpenShift Container Platform 4.15 1791632611 premières → < 1791632611 1791632611
Red Hat OpenShift Container Platform 4.12 1792974936 premières → < 1792974936 1792974936
Red Hat OpenShift Container Platform 4.16 1792879727 premières → < 1792879727 1792879727
Red Hat OpenShift Container Platform 4.18 1792874579 premières → < 1792874579 1792874579
Afficher les 2 autres branches
Produit Versions touchées Corrigé en
Red Hat OpenShift Container Platform 4.22 1792771251 premières → < 1792771251 1792771251
Red Hat OpenShift Container Platform 5 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat OpenShift Container Platform 4

Les 629 CVE de Red Hat OpenShift Container Platform 4 →
CVE-2026-82976 Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret 7.1 Élevée CVE-2026-120831 Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service 6.5 Moyenne CVE-2026-120830 Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure 7.4 Élevée CVE-2026-120194 Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step 7.5 Élevée
Suivre cette CVE