Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-9779

Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named "cluster-manager", which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager's token and steal any service account token by creating and mounting the target service account to control the whole cluster.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

open-cluster-management-io

  • 0.12.0affected
  • 0.13.0unaffected

Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

Default version status: unaffected

References