Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2024-13484

Openshift-gitops-operator-container: namespace isolation break

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gitops-operator

Default version status: unaffected

  • 0 to < 1.13affected

Red Hat Red Hat OpenShift GitOps 1.14

Default version status: affected

  • v1.14.4-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.14

Default version status: affected

  • v1.14.4-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.14

Default version status: affected

  • v1.14.4-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.14

Default version status: affected

  • v1.14.4-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.14

Default version status: affected

  • v1.14.4-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.14

Default version status: affected

  • v1.14.4-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.14

Default version status: affected

  • v1.14.4-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.14

Default version status: affected

  • v1.14.4-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.14

Default version status: affected

  • v1.14.4-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.14

Default version status: affected

  • v1.14.4-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.15

Default version status: affected

  • v1.15.2-4 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.15

Default version status: affected

  • v1.15.2-4 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.15

Default version status: affected

  • v1.15.2-1 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.15

Default version status: affected

  • v1.15.2-4 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.15

Default version status: affected

  • v1.15.2-4 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.15

Default version status: affected

  • v1.15.2-4 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.15

Default version status: affected

  • v1.15.2-4 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.15

Default version status: affected

  • v1.15.2-4 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.15

Default version status: affected

  • v1.15.2-4 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.15

Default version status: affected

  • v1.15.2-4 to < *unaffected

Red Hat Red Hat OpenShift GitOps 1.16

Default version status: affected

  • 1.16 to < *unaffected

References