Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-25133

Openshift-dedicated: hive: rce through aws/kubernetes client configuration leads to privilege escalation

Description

A flaw was found in the Hive ClusterDeployments resource in OpenShift Dedicated. In certain conditions, this issue may allow a developer account on a Hive-enabled cluster to obtain cluster-admin privileges by executing arbitrary commands on the hive/hive-controllers pod.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openshift-hive

Default version status: unaffected

  • 0 to < 5ba846620f9dbf49301dabb0d40cc980aabef4e0affected

References