Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2024-5042

Submariner-operator: rbac permissions can allow for the spread of node compromises

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

submariner-operator

Default version status: unaffected

  • 0 to < 0.14.9affected
  • 0.15.0 to < 0.15.5affected
  • 0.16.0 to < 0.16.7affected
  • 0.17.0 to < 0.17.2affected
  • 0.18.0-m0 to < 0.18.0-rc0affected

Red Hat RHODF-4.16-RHEL-9

Default version status: affected

  • v4.16.0-19 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774540992 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774540668 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541259 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541345 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541880 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541518 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541420 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541448 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541663 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541469 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774542075 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541617 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541614 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541633 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541625 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541625 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774542179 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541779 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541857 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541919 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774541919 to < *unaffected

Red Hat Red Hat Openshift Data Foundation 4.20

Default version status: affected

  • 1774542101 to < *unaffected

Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

Default version status: affected

Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

Default version status: affected

Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

Default version status: affected

Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

Default version status: affected

Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

Default version status: affected

Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

Default version status: affected

References